RHBA-2025:8212

Vulnerability from csaf_redhat - Published: 2025-06-16 17:50 - Updated: 2026-11-05 12:14
Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.10.11 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.10.11 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.10.11
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2025-21605

A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted, and the memory is unavailable. When password authentication is enabled on the Redis server but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system runs out of memory.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2025-27144

A flaw was found in GO-JOSE. In affected versions, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code uses strings.Split(token, ".") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. This issue could be exploied by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 30 products, the same list as for CVE-2025-21605
Threats
Impact Moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.10.11 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.10.11",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:8212",
        "url": "https://access.redhat.com/errata/RHBA-2025:8212"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_8212.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.10.11 bug fix release",
    "tracking": {
      "current_release_date": "2026-11-05T12:14:51+00:00",
      "generator": {
        "date": "2026-11-05T12:14:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.4"
        }
      },
      "id": "RHBA-2025:8212",
      "initial_release_date": "2025-06-16T17:50:37+00:00",
      "revision_history": [
        {
          "date": "2025-06-16T17:50:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-06-16T17:50:37+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-05T12:14:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
                  "product_id": "quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.11-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
                  "product_id": "quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.11-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
                  "product_id": "quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.11-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
                  "product_id": "quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.11-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.10.11-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.10.11-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.10.11-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-21605",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-04-23T16:01:41.763906+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2361883"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted, and the memory is unavailable.\n\nWhen password authentication is enabled on the Redis server but no password is provided, the client can still cause the output buffer to grow from \"NOAUTH\" responses until the system runs out of memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-21605"
        },
        {
          "category": "external",
          "summary": "RHBZ#2361883",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2361883"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-21605",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-21605"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-21605",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21605"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.4.3",
          "url": "https://github.com/redis/redis/releases/tag/7.4.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff",
          "url": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff"
        }
      ],
      "release_date": "2025-04-23T15:38:11.042000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-16T17:50:37+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:8212"
        },
        {
          "category": "workaround",
          "details": "A workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in the following different ways:\n\n- Using network access control tools like firewalls, iptables, security groups, etc.\n- Enabling TLS and requiring users to authenticate using client side certificates.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client"
    },
    {
      "cve": "CVE-2025-27144",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-02-24T23:00:42.448432+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2347423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GO-JOSE. In affected versions, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code uses strings.Split(token, \".\") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. This issue could be exploied by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go-jose: Go JOSE\u0027s Parsing Vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A moderate-impact denial of service flaw was found in Go JOSE, the Go implementation of the JSON Object Signing and Encryption (JOSE) standards, which is shipped in a number of Red Hat offerings including Red Hat OpenShift and related container-based products. When parsing compact JWS or JWE input, Go JOSE used strings.Split(token, \".\") to split tokens, which can consume excessive memory when processing maliciously crafted tokens containing a large number of \".\" characters. A remote attacker with no privileges or required user interaction could submit numerous malformed tokens to an application that passes attacker-controlled input to Go JOSE, causing memory exhaustion and a denial of service that affects only availability. Red Hat rates this issue as moderate impact, consistent with the upstream severity assessment. Fixes are being pursued by the affected product components; some components were determined not to be affected because the vulnerable code is not present or is not in an execute path.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-27144"
        },
        {
          "category": "external",
          "summary": "RHBZ#2347423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2347423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-27144",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-27144"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-27144",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27144"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22",
          "url": "https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/releases/tag/v4.0.5",
          "url": "https://github.com/go-jose/go-jose/releases/tag/v4.0.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78"
        }
      ],
      "release_date": "2025-02-24T22:22:22.863000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-16T17:50:37+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:8212"
        },
        {
          "category": "workaround",
          "details": "As a workaround, applications can pre-validate that payloads being passed to Go JOSE do not contain an excessive number of `.` characters.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f4c608afee3d20de7c4c5936a9380423f208d232d1a2c390edf7f73136bff8a_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:4d6150fe880cd8b1c1b04a15397420d2d79adaf730bece9afe2f2fc6996d732b_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b39ceaa48e63ac827d78c127b0a49e802d1e80bba35b5608b9cdecd4d98f14bf_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:80b82c23dd5265a77ee1f89b4b53b9acf9e03d1c3386e6811e76a09fac3a3853_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f69ef7cf6f5b5e4c88908d036a4dbaf58e9a17101387a85cc6bd54909bed0c40_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:f7d99d7b2140b752f91051f93d0e54a747262bf8f7586a60db5561782c915922_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:1179564c2065f38444e51f4e0dec3585d6b32233f2d9c132302a053e8a8fa3a2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:19c0fd2be13377baa48f598a228a430bd736fc69faaa370230bf1d4c3eea7016_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f1c5c6fdb298b1c8e422699f4513ee6a17ca875d72ed20cfba13f7e9d32f46d2_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:94659ba9010eebfe4ffb77ecfa805479781acd855fedf343d1a4045cb1bef416_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ca615d7921a091e51f13176079587bec3f41dd3f206a4ef21e12760dfafe7be3_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fc209cffe72f734feb094bf190b455a88d05d8f93eed63422339ea138fef9f92_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ba47477d334d76e9b4dfd1089fd2e6280a674377da77eaf9a578a984509f3e18_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e39a73beadbce658d5aeba08e686f1cd292f0cd416852a0049c774c1d23b00cc_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ebfecf03051e114f2af070360893986cac65290c3121b3380d03d511f2cb77db_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:0b3f812d2e8fbe6da47076fd28484b50bc8ec1af4c807c69e7897736e00cd966_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:dd20411d951ad7473f1d98c00c263b007f5f18aec13fa7f72d1657fbe594976a_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:f9493a7c1d73f099cb4d84a3bafad5bad4c2a2881f959c98f7d5111e9beba9ad_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37877826649b73c1ba415d08c0837ed804ffb74a699e24648d1658151c6795ed_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:470e6cbfb1b9722f038b24a3c34f80967db860c75dd0821acbee19248a69f11b_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4714ef57caff38e0dffbb510140b680080f456c5ece4fa40bd7415a9c35b17ef_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4d0ac1d9b97c910ef56f140d17e5bd80ab0319946dbec5570ed95d01f8aec383_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:7cd87c2f2c5dfb28680d61f8882e68b695ce5188dbca8a28dfdfcd3eb6e80549_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:d2a80e6052ed0fe00bd43a6a2c4cdae25c3d2a3f0616e152c753d2365a086df0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:24a349821d24a325526502c29d5e984143fe7840911be8243a2e046354c51686_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7bd1c33e074d53456b047ea5341b260652fe4dcde7b3774feb3a600c43287049_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a82e33c6acb2d5288538d8bca7fbb76103be2323aa262cb5467e88fd5bdaf101_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0966dc62494fa8af9b233cc3a4a8d579b39893c4d278f0c4494550779391bc10_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:925f25e189ce460fac9a4df3537d83407d08344e8642c8b8cb585bf185bee9ca_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:e470d76a183bd78277393e21f336a975fb1a0db2b0f30a19ca673d0e68a6a7b2_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "go-jose: Go JOSE\u0027s Parsing Vulnerable to Denial of Service"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.