RHBA-2025:4023

Vulnerability from csaf_redhat - Published: 2025-04-24 13:58 - Updated: 2026-11-09 05:52
Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.10.10 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.10.10 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.10.10
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2024-6827

A flaw was found in Gunicorn. This vulnerability allows request smuggling, leading to cache poisoning, data exposure, session manipulation, Server-side request forgery (SSRF), Cross-site scripting (XSS), denial of service (DoS), data integrity compromise, security bypass, and information leakage via improper validation of the 'Transfer-Encoding' header.

7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2025-22868

A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, ".")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1286 - Improper Validation of Syntactic Correctness of Input
Affected products
Fixed 30 products, the same list as for CVE-2024-6827
Threats
Impact Important
CVE-2025-22869

A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 30 products, the same list as for CVE-2024-6827
Threats
Impact Important
CVE-2025-27516

A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja's sandbox does catch calls to `str.format` and ensures they don't escape the sandbox. However, it's possible to use the `|attr` filter to get a reference to a string's plain format method, bypassing the sandbox.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-1336 - Improper Neutralization of Special Elements Used in a Template Engine
Affected products
Fixed 30 products, the same list as for CVE-2024-6827
Threats
Impact Important
References
Acknowledgments
jub0bs
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.10.10 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.10.10",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:4023",
        "url": "https://access.redhat.com/errata/RHBA-2025:4023"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_4023.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.10.10 bug fix release",
    "tracking": {
      "current_release_date": "2026-11-09T05:52:07+00:00",
      "generator": {
        "date": "2026-11-09T05:52:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHBA-2025:4023",
      "initial_release_date": "2025-04-24T13:58:00+00:00",
      "revision_history": [
        {
          "date": "2025-04-24T13:58:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-04-24T13:58:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-09T05:52:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.10-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.10-27"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.10-14"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.10-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
                  "product_id": "quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.10-27"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
                  "product_id": "quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.10-14"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.10-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
                  "product_id": "quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.10-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.10-27"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.10-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64",
                  "product_id": "quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.10-14"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6827",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests"
      },
      "discovery_date": "2025-03-20T11:07:09.471036+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2353700"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Gunicorn. This vulnerability allows request smuggling, leading to cache poisoning, data exposure, session manipulation, Server-side request forgery (SSRF), Cross-site scripting (XSS), denial of service (DoS), data integrity compromise, security bypass, and information leakage via improper validation of the \u0027Transfer-Encoding\u0027 header.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gunicorn: HTTP Request Smuggling in benoitc/gunicorn",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
          "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-6827"
        },
        {
          "category": "external",
          "summary": "RHBZ#2353700",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2353700"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-6827",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-6827"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6827",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6827"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7",
          "url": "https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7"
        }
      ],
      "release_date": "2025-03-20T10:09:55.725000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-04-24T13:58:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:4023"
        },
        {
          "category": "workaround",
          "details": "Red Hat Product Security currently does not have a recommended mitigation at this time.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gunicorn: HTTP Request Smuggling in benoitc/gunicorn"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "jub0bs"
          ]
        }
      ],
      "cve": "CVE-2025-22868",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2025-02-26T04:00:44.350024+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2348366"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, \".\")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT impact: CVE-2025-22868 affects Red Hat product components that use golang.org/x/oauth2/jws, including components across Red Hat Enterprise Linux, OpenShift, cloud, management, Ansible, Ceph, and other Red Hat products. An unauthenticated remote attacker can submit a maliciously crafted token containing a large number of \u0027.\u0027 characters; parsing with strings.Split(token, \".\") can consume excessive memory, causing memory exhaustion and denial of service. The current record contains 659 affected component entries, with component-level delegated outcomes including AFFECTED, NOTAFFECTED, WONTFIX, and OOSS; entries classified as NOTAFFECTED are therefore component-specific, and this record provides no more specific product-level justification for those classifications. The CVSS 3.1 score of 7.5 (IMPORTANT) reflects network reachability and a high availability impact, with no confidentiality or integrity impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
          "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-22868"
        },
        {
          "category": "external",
          "summary": "RHBZ#2348366",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348366"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-22868",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/652155",
          "url": "https://go.dev/cl/652155"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/71490",
          "url": "https://go.dev/issue/71490"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-3488",
          "url": "https://pkg.go.dev/vuln/GO-2025-3488"
        }
      ],
      "release_date": "2025-02-26T03:07:49.012000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-04-24T13:58:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:4023"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws"
    },
    {
      "cve": "CVE-2025-22869",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-02-26T04:00:47.683125+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2348367"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While this flaw affects both SSH clients and servers implemented with golang.org/x/crypto/ssh, realistically the flaw will only lead to a DoS when transferring large files, greatly reducing the likelihood of exploitation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
          "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-22869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2348367",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348367"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-22869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22869"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/652135",
          "url": "https://go.dev/cl/652135"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/71931",
          "url": "https://go.dev/issue/71931"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-3487",
          "url": "https://pkg.go.dev/vuln/GO-2025-3487"
        }
      ],
      "release_date": "2025-02-26T03:07:48.855000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-04-24T13:58:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:4023"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated when using the client only connecting to trusted servers.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh"
    },
    {
      "cve": "CVE-2025-27516",
      "cwe": {
        "id": "CWE-1336",
        "name": "Improper Neutralization of Special Elements Used in a Template Engine"
      },
      "discovery_date": "2025-03-05T21:01:07.674606+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2350190"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja\u0027s sandbox does catch calls to `str.format` and ensures they don\u0027t escape the sandbox. However, it\u0027s possible to use the `|attr` filter to get a reference to a string\u0027s plain format method, bypassing the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jinja2: Jinja sandbox breakout through attr filter selecting format method",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as important severity due to the potential for an attacker to bypass Jinja\u0027s sandbox by exploiting the |attr filter, by controlling template content, an attacker can execute arbitrary Python code, impacting the integrity, confidentiality, and availability of the system. While the attack requires user interaction to trigger untrusted templates, the risk is significant in applications that allow such templates to be executed.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
          "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-27516"
        },
        {
          "category": "external",
          "summary": "RHBZ#2350190",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2350190"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-27516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-27516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-27516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27516"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403",
          "url": "https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7",
          "url": "https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7"
        }
      ],
      "release_date": "2025-03-05T20:40:06.568000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-04-24T13:58:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:4023"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:2b2d36679669e18ef6168798432aba1840c792f954f73aeb4afd51e3175d13a7_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:5f5baa653a27718e5deb946f9987551f18ac7c1b338f63a77dc6a551f2fefd3a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:cd684066f726cebc58ab1eabf9835770f70e0178d7a2dc0677e8a50ead298c4d_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53d4368e537c56905e66c6d381ff967c028afc765caff4d0fb293ea12efc5936_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:662761f1dc7f7fcc7f10d37ce6dcf7da7be3865c1c217b716f18394b6fa2142d_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8822090b8c5c0d58a248d02092d61b86af6cc6f899287bc86133b7e768a6df5a_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7ff37f866fbbf5dcfa7a146b0e113f12171041c9a9880a7d9a9ff10ec6e03567_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ebc2147496806864ba214f87c3b1342df980d020f3e04f4b1e177448d3ac1a0b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f2e7399a04b441485a4ae690bac418324cb7b96af183e6856e80357878b7d893_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a7ef4a1e70ecce42fa3dffb0f01b584a9935d58a820fbaf2cf4c0611b3c1dfb7_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:aeae6eb284811fe8bddd1183bfc9fb7578183fc3236681aba93649ebcf73e0b4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:bdeaeba48329e6df9c62309bb8e38df8a6c60b969da490d7edeb59878ec8cda0_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:27e77c2d5d71fd2badeebbccaea3bf9a423f29cb85be037f86d3a47ca8e767df_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:b8e6ad06598edbbc36cf4c919f40220ae33571ab86d22b2aea451a7d9b3966a4_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ef223a6e094651f496c0899f941f047d12133155fc59730f5627c2c96cf6ce22_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0e7d09404a3bd58b4d6f6f21cb985d2c65f1eff5ece628a056205686cbadfc4d_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7434e2519403d2bfd60a8afc85656754d8026b060861a453e746e345de2581e7_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b201cc321bbe53ae2440cf7b2fec3cf1814d9692c7202a083b68686d9c1daaa0_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:2b4bff319c03a1a8c37483971388408e16e9120cf7e3118989bbdf34ba9f9234_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:641359f56e52458a2b87c2c0a2691c0c084b6c188c2c5382ce7200a18a7c5f11_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:89394c8a3257bbf4578e5eb7d4446bf2e1a3860519df879ceead536f8db82507_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b80447a41e343b1d7477160539e6fa64f31860d4573485b7d0639f4c25a4356c_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bba4277aa8b8e4bc87193138427670114e8e9b5f0b8dd6033b4e489c44d769e6_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:c5a57e925ab46a0f66a1b691400b305007a01803afc8173e66011aa835e8547a_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6dac58289c937d73a3fdb1f2b6fe50ba94d5139618ff616aad9c28315bd968c6_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:8a7dce5a8321a6deb44b13e2ef522b41bb93100c3ca657d0418fe14841051264_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:e0c8633957cd76fb4f21b20402089d779888941d940ea1c6aed16a881e9bb668_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:40c99099b7486efd908bb94056e14dd50be3001036da1f73e4cabe96cb1102d3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:9cd6745a1fdeea73a4bfa75149141cb2f0ca862b2969fc30472faa91e9eec44e_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b24d9949ee22c931367d463877219cfe251d3a34a534df83d64d36d26d1c732f_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jinja2: Jinja sandbox breakout through attr filter selecting format method"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.