RHSA-2023:3435

Vulnerability from csaf_redhat - Published: 2023-06-05 09:28 - Updated: 2026-04-29 18:11
Summary
Red Hat Security Advisory: Red Hat Advanced Cluster Security 3.74 for Kubernetes security update
Severity
Important
Notes
Topic: An update is now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This release of RHACS 3.74.4 includes a fix for CVE-2023-24540 by building RHACS with updated Golang. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the links listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in golang where angle brackets (<>) were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if executed with untrusted input.

CWE-176 - Improper Handling of Unicode Encoding
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64
Vendor Fix fix
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x
Vendor Fix fix
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le
Workaround
Threats
Impact Moderate

A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

CWE-176 - Improper Handling of Unicode Encoding
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64
Vendor Fix fix
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x
Vendor Fix fix
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le
Workaround
Threats
Impact Important

A flaw was found in golang. Templates containing actions in unquoted HTML attributes, for example, "attr={{.}}") executed with empty input, could result in output that has unexpected results when parsed due to HTML normalization rules. This issue may allow the injection of arbitrary attributes into tags.

CWE-176 - Improper Handling of Unicode Encoding
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64
Vendor Fix fix
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x
Vendor Fix fix
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64
Workaround
Unresolved product id: 8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le
Workaround
Threats
Impact Moderate
Acknowledgments
Mattermost Juho Nurminen

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). \n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of RHACS 3.74.4 includes a fix for CVE-2023-24540 by building RHACS with updated Golang.\n\nSecurity Fix(es):\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n\nFor more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the links listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:3435",
        "url": "https://access.redhat.com/errata/RHSA-2023:3435"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.openshift.com/acs/3.74/release_notes/374-release-notes.html",
        "url": "https://docs.openshift.com/acs/3.74/release_notes/374-release-notes.html"
      },
      {
        "category": "external",
        "summary": "2196026",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196026"
      },
      {
        "category": "external",
        "summary": "2196027",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196027"
      },
      {
        "category": "external",
        "summary": "2196029",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196029"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3435.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Advanced Cluster Security 3.74 for Kubernetes security update",
    "tracking": {
      "current_release_date": "2026-04-29T18:11:39+00:00",
      "generator": {
        "date": "2026-04-29T18:11:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.7"
        }
      },
      "id": "RHSA-2023:3435",
      "initial_release_date": "2023-06-05T09:28:49+00:00",
      "revision_history": [
        {
          "date": "2023-06-05T09:28:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-06-05T09:28:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-29T18:11:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHACS 3.74 for RHEL 8",
                "product": {
                  "name": "RHACS 3.74 for RHEL 8",
                  "product_id": "8Base-RHACS-3.74",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:advanced_cluster_security:3.74::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Security for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=3.74.4-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=3.74.4-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=3.74.4-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=3.74.4-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=3.74.4-2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=3.74.4-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=3.74.4-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=3.74.4-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=3.74.4-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=3.74.4-2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=3.74.4-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=3.74.4-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=3.74.4-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=3.74.4-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=3.74.4-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=3.74.4-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=3.74.4-2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64 as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le as a component of RHACS 3.74 for RHEL 8",
          "product_id": "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-3.74"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Juho Nurminen"
          ],
          "organization": "Mattermost"
        }
      ],
      "cve": "CVE-2023-24539",
      "cwe": {
        "id": "CWE-176",
        "name": "Improper Handling of Unicode Encoding"
      },
      "discovery_date": "2023-05-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2196026"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang where angle brackets (\u003c\u003e) were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a \u0027/\u0027 character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if executed with untrusted input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: html/template: improper sanitization of CSS values",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "For Red Hat Enterprise Linux,\n\n* Conmon uses go in unit testing, but not functionally in the package. Go is used only in test files, not in the actual code. Thus, conmon is not affected.\n* The Go templates in Grafana do not contain any javascript. Thus, it is not affected.\n* Ignition does not make use of html/template.\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM), the affected containers are behind OpenShift OAuth authentication. This restricts access to the vulnerable golang html/templates to authenticated users only, therefore, the impact is low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-24539"
        },
        {
          "category": "external",
          "summary": "RHBZ#2196026",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196026"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-24539",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-24539"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-24539",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24539"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/go/issues/59720",
          "url": "https://github.com/golang/go/issues/59720"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU",
          "url": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"
        }
      ],
      "release_date": "2023-04-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-06-05T09:28:49+00:00",
          "details": "If you are using an earlier version of RHACS 3.74, you are advised to upgrade to patch release 3.74.4.",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:3435"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: html/template: improper sanitization of CSS values"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Juho Nurminen"
          ],
          "organization": "Mattermost"
        }
      ],
      "cve": "CVE-2023-24540",
      "cwe": {
        "id": "CWE-176",
        "name": "Improper Handling of Unicode Encoding"
      },
      "discovery_date": "2023-05-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2196027"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set \"\\t\\n\\f\\r\\u0020\\u2028\\u2029\" in JavaScript contexts that also contain actions may not be properly sanitized during execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: html/template: improper handling of JavaScript whitespace",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "For Red Hat Enterprise Linux,\n* Conmon uses go in unit testing, but not functionally in the package. Go is used only in test files, hence, not in the actual code, thus, conmon is not affected.\n* The Go templates in Grafana do not contain any javascript. Thus, it is not affected.\n* Ignition does not make use of html/template.\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) the affected containers are behind OpenShift OAuth authentication. This restricts access to the vulnerable golang html/templates to authenticated users only, therefore the impact is low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-24540"
        },
        {
          "category": "external",
          "summary": "RHBZ#2196027",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196027"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-24540",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-24540"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-24540",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/59721",
          "url": "https://go.dev/issue/59721"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU",
          "url": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"
        }
      ],
      "release_date": "2023-04-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-06-05T09:28:49+00:00",
          "details": "If you are using an earlier version of RHACS 3.74, you are advised to upgrade to patch release 3.74.4.",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:3435"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: html/template: improper handling of JavaScript whitespace"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Juho Nurminen"
          ],
          "organization": "Mattermost"
        }
      ],
      "cve": "CVE-2023-29400",
      "cwe": {
        "id": "CWE-176",
        "name": "Improper Handling of Unicode Encoding"
      },
      "discovery_date": "2023-05-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2196029"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang. Templates containing actions in unquoted HTML attributes, for example, \"attr={{.}}\") executed with empty input, could result in output that has unexpected results when parsed due to HTML normalization rules. This issue may allow the injection of arbitrary attributes into tags.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: html/template: improper handling of empty HTML attributes",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "For Red Hat Enterprise Linux,\n\n* Conmon uses go in unit testing, but not functionally in the package. Go is used only in test files, not in the actual code. Thus, conmon is not affected.\n* The Go templates in Grafana do not contain any javascript. Thus, it is not affected.\n* Ignition does not make use of html/template.\n\nIn OpenShift Container Platform and Red Hat Advanced Cluster Management for Kubernetes (RHACM), the affected containers are behind OAuth authentication. This restricts access to the vulnerable golang html/templates to authenticated users, reducing the impact to low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le"
        ],
        "known_not_affected": [
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
          "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-29400"
        },
        {
          "category": "external",
          "summary": "RHBZ#2196029",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196029"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29400",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-29400"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29400",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29400"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/59722",
          "url": "https://go.dev/issue/59722"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU",
          "url": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"
        }
      ],
      "release_date": "2023-04-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-06-05T09:28:49+00:00",
          "details": "If you are using an earlier version of RHACS 3.74, you are advised to upgrade to patch release 3.74.4.",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:3435"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:406b6ad68369bb3ca09c80c3b44e599de4c10a509bffe680ca3c10e2573895c6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:8e3a1d8022cf6c500c63e803af3b6fb991c1fcf5ade52b54b9bab7ca2563bfb6_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:361633af57c336504b24d92f79959e2bdef0151544a68deba8cf2cdc829a4953_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64b1727d87614f899ea9246cf3a15016913500bbb5005a8817c10beb930c2831_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:7b9815779933ede015cb3ed5f2901ad2c3b339bc2177bb9a6777e832bae86adc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:34d88bd8a54a78f114168776bb76377e7e17f1a50eb898c92f6b8a8168f6da29_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:655b8969f5fb4f4e7a63e4215d7718c45cc6e471b70c0c5776a17afee6f76203_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-operator-bundle@sha256:aca9396a41f339d8968dd4db09dde380d3a9c218dedeae9d99c33e28254224ce_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:bbcfba6e087848830b0c2fd25d389dec670fae9f80ebfe24baf6b03d94aa17f8_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a0e4d54f82ed7ba720f6086d6080cdbc3a90e909f259700639a8e529d16fd9d1_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c2897f799497e4437c237c8f90f11e591296abdd36e35f5d5b44e7e3de0bab19_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3345fb6cd6377732488fbf4e039685787d40f8e0bc0a0a03144edf1abbed876a_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:40976c1d8f10969bc2835cf53bd2fd54e6502ba58f850f64c3c7f1a8324b23fb_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:268063a9b8bd80f19966ffc4ee6cc5c60a35ea399c8788c8bdfd629bb06a0105_ppc64le",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33b4345b23c2f289982b24136d4fde0cf59c6cc5f2aeee75f76339bc12a2f144_amd64",
            "8Base-RHACS-3.74:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: html/template: improper handling of empty HTML attributes"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…