Vulnerability-Lookup

RHBA-2025:12510

Vulnerability from csaf_redhat - Published: 2025-08-08 01:58 - Updated: 2026-11-07 05:03

Summary

Red Hat Bug Fix Advisory: Red Hat Quay v3.10.13 bug fix release

Severity

Important

Notes

Topic: Red Hat Quay 3.10.13 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Quay 3.10.13

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-32023

A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 30 products

Product	Version	Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

12 references

URL	Category
https://access.redhat.com/errata/RHBA-2025:12510	self
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-32023	self
https://bugzilla.redhat.com/show_bug.cgi?id=2376858	external
https://www.cve.org/CVERecord?id=CVE-2025-32023	external
https://nvd.nist.gov/vuln/detail/CVE-2025-32023	external
https://github.com/redis/redis/commit/50188747cbf…	external
https://github.com/redis/redis/releases/tag/6.2.19	external
https://github.com/redis/redis/releases/tag/7.2.10	external
https://github.com/redis/redis/releases/tag/7.4.5	external
https://github.com/redis/redis/releases/tag/8.0.3	external
https://github.com/redis/redis/security/advisorie…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.10.13 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.10.13",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:12510",
        "url": "https://access.redhat.com/errata/RHBA-2025:12510"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_12510.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.10.13 bug fix release",
    "tracking": {
      "current_release_date": "2026-11-07T05:03:17+00:00",
      "generator": {
        "date": "2026-11-07T05:03:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHBA-2025:12510",
      "initial_release_date": "2025-08-08T01:58:13+00:00",
      "revision_history": [
        {
          "date": "2025-08-08T01:58:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-08T01:58:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-07T05:03:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.13-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.13-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.13-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.13-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
                  "product_id": "quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.13-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64",
                  "product_id": "quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.13-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.13-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
                  "product_id": "quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.13-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.13-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.13-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
                  "product_id": "quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.13-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-32023",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-07-07T16:01:22.982604+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw can only be exploited by an authenticated attacker when the Redis server has hyperloglog operations implemented, limiting the impact of this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
          "8Base-Quay-3:quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-32023",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/6.2.19",
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.2.10",
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.4.5",
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/8.0.3",
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        }
      ],
      "release_date": "2025-07-07T15:22:19.155000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-08T01:58:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:12510"
        },
        {
          "category": "workaround",
          "details": "Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a518c8449b7db02f059e0477a1445c9df680c268ee0a08b35645d4e21e5d01b3_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability"
    }
  ]
}

CVE-2025-32023 (GCVE-0-2025-32023)

Vulnerability from cvelistv5 – Published: 2025-07-07 15:22 – Updated: 2026-02-04 19:26

Title

Redis allows out of bounds writes in hyperloglog commands leading to RCE

Summary

Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-07 15:43 UTC

CWE

CWE-680 - Integer Overflow to Buffer Overflow

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 8094 records in the last 180 days details

References

7 references

URL	Tags
https://github.com/redis/redis/security/advisorie…	x_refsource_CONFIRM
https://github.com/redis/redis/commit/50188747cbf…	x_refsource_MISC
https://github.com/redis/redis/releases/tag/6.2.19	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.2.10	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.4.5	x_refsource_MISC
https://github.com/redis/redis/releases/tag/8.0.3	x_refsource_MISC
https://www.exploit-db.com/exploits/52477

Impacted products

1 product

Vendor	Product	Version
redis	redis	Affected: >= 8.0.0, < 8.0.3 Affected: >= 7.4-rc1, < 7.4.5 Affected: >= 7.0.0, < 7.2.10 Affected: >= 2.8.0, < 6.2.19

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-32023",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-07T15:43:02.576291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-07T15:43:15.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-04T19:26:46.239Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.exploit-db.com/exploits/52477"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "redis",
          "vendor": "redis",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 8.0.0, \u003c 8.0.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.4-rc1, \u003c 7.4.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.0.0, \u003c 7.2.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.8.0, \u003c 6.2.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-680",
              "description": "CWE-680: Integer Overflow to Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-07T15:22:19.155Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        },
        {
          "name": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/6.2.19",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.2.10",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.4.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/8.0.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        }
      ],
      "source": {
        "advisory": "GHSA-rp2m-q4j6-gr43",
        "discovery": "UNKNOWN"
      },
      "title": "Redis allows out of bounds writes in hyperloglog commands leading to RCE"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-32023",
    "datePublished": "2025-07-07T15:22:19.155Z",
    "dateReserved": "2025-04-01T21:57:32.955Z",
    "dateUpdated": "2026-02-04T19:26:46.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted