Vulnerability-Lookup

RHSA-2025:1334

Vulnerability from csaf_redhat - Published: 2025-02-11 21:20 - Updated: 2026-05-29 18:40

Summary

Red Hat Security Advisory: ACS 4.5 enhancement and security update

Severity

Important

Notes

Topic: Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes security fixes.

Details: This release of RHACS includes fixes for the following security vulnerabilities: * npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript (CVE-2024-11831) * go-git: Argument injection via the URL field (CVE-2025-21613) * go-git: Go-git clients vulnerable to DoS via maliciously crafted Git server replies (CVE-2025-21614) * golang.org/x/crypto: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (CVE-2024-45337) * golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-11831

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x	—	Vendor Fix fix Workaround

Known not affected 36 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x	—	Workaround

Threats

Impact Moderate

CVE-2024-45337

A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-285 - Improper Authorization

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le	—	Vendor Fix fix Workaround

Known not affected 27 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x	—	Workaround

Threats

Impact Important

CVE-2024-45338

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le	—	Vendor Fix fix

Known not affected 27 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x		—

Threats

Impact Important

CVE-2025-21613

An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport protocol is being used.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 21 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x	—	Vendor Fix fix Workaround

Known not affected 18 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x	—	Workaround
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le	—	Workaround

Threats

Impact Important

CVE-2025-21614

A denial of service (DoS) vulnerability was found in go-git. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which triggers resource exhaustion in go-git clients.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 21 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x	—	Vendor Fix fix

Known not affected 18 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x		—
Unresolved product id: 8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le		—

Threats

Impact Important

References

44 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:1334	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2312579	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331720	external
https://bugzilla.redhat.com/show_bug.cgi?id=2333122	external
https://bugzilla.redhat.com/show_bug.cgi?id=2335888	external
https://bugzilla.redhat.com/show_bug.cgi?id=2335901	external
https://issues.redhat.com/browse/ROX-27932	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-11831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2312579	external
https://www.cve.org/CVERecord?id=CVE-2024-11831	external
https://nvd.nist.gov/vuln/detail/CVE-2024-11831	external
https://github.com/yahoo/serialize-javascript/com…	external
https://github.com/yahoo/serialize-javascript/pull/173	external
https://access.redhat.com/security/cve/CVE-2024-45337	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331720	external
https://www.cve.org/CVERecord?id=CVE-2024-45337	external
https://nvd.nist.gov/vuln/detail/CVE-2024-45337	external
https://github.com/golang/crypto/commit/b4f1988a3…	external
https://go.dev/cl/635315	external
https://go.dev/issue/70779	external
https://groups.google.com/g/golang-announce/c/-nP…	external
https://pkg.go.dev/vuln/GO-2024-3321	external
https://access.redhat.com/security/cve/CVE-2024-45338	self
https://bugzilla.redhat.com/show_bug.cgi?id=2333122	external
https://www.cve.org/CVERecord?id=CVE-2024-45338	external
https://nvd.nist.gov/vuln/detail/CVE-2024-45338	external
https://go.dev/cl/637536	external
https://go.dev/issue/70906	external
https://groups.google.com/g/golang-announce/c/wSC…	external
https://pkg.go.dev/vuln/GO-2024-3333	external
https://access.redhat.com/security/cve/CVE-2025-21613	self
https://bugzilla.redhat.com/show_bug.cgi?id=2335888	external
https://www.cve.org/CVERecord?id=CVE-2025-21613	external
https://nvd.nist.gov/vuln/detail/CVE-2025-21613	external
https://github.com/go-git/go-git/security/advisor…	external
https://pkg.go.dev/vuln/GO-2025-3368	external
https://access.redhat.com/security/cve/CVE-2025-21614	self
https://bugzilla.redhat.com/show_bug.cgi?id=2335901	external
https://www.cve.org/CVERecord?id=CVE-2025-21614	external
https://nvd.nist.gov/vuln/detail/CVE-2025-21614	external
https://github.com/go-git/go-git/security/advisor…	external
https://pkg.go.dev/vuln/GO-2025-3367	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes security fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of RHACS includes fixes for the following security vulnerabilities:\n\n* npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript (CVE-2024-11831)\n\n* go-git: Argument injection via the URL field (CVE-2025-21613)\n\n* go-git: Go-git clients vulnerable to DoS via maliciously crafted Git server replies (CVE-2025-21614)\n\n* golang.org/x/crypto: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (CVE-2024-45337)\n\n* golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:1334",
        "url": "https://access.redhat.com/errata/RHSA-2025:1334"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2312579",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312579"
      },
      {
        "category": "external",
        "summary": "2331720",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
      },
      {
        "category": "external",
        "summary": "2333122",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
      },
      {
        "category": "external",
        "summary": "2335888",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2335888"
      },
      {
        "category": "external",
        "summary": "2335901",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2335901"
      },
      {
        "category": "external",
        "summary": "ROX-27932",
        "url": "https://issues.redhat.com/browse/ROX-27932"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1334.json"
      }
    ],
    "title": "Red Hat Security Advisory: ACS 4.5 enhancement and security update",
    "tracking": {
      "current_release_date": "2026-05-29T18:40:28+00:00",
      "generator": {
        "date": "2026-05-29T18:40:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:1334",
      "initial_release_date": "2025-02-11T21:20:30+00:00",
      "revision_history": [
        {
          "date": "2025-02-11T21:20:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-02-11T21:20:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-29T18:40:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHACS 4.5 for RHEL 8",
                "product": {
                  "name": "RHACS 4.5 for RHEL 8",
                  "product_id": "8Base-RHACS-4.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Security for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.5.6-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.5.6-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.5.6-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=4.5.6-1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.5.6-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.5.6-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.5.6-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=4.5.6-1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.5.6-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.5.6-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.5.6-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=4.5.6-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=4.5.6-1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64 as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x as a component of RHACS 4.5 for RHEL 8",
          "product_id": "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-11831",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2024-09-16T16:43:32.021000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2312579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x"
        ],
        "known_not_affected": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2312579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-11831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e",
          "url": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/pull/173",
          "url": "https://github.com/yahoo/serialize-javascript/pull/173"
        }
      ],
      "release_date": "2024-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-11T21:20:30+00:00",
          "details": "If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.6.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:1334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript"
    },
    {
      "cve": "CVE-2024-45337",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2024-12-11T19:00:54.247490+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331720"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le"
        ],
        "known_not_affected": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331720",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
          "url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/635315",
          "url": "https://go.dev/cl/635315"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/70779",
          "url": "https://go.dev/issue/70779"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
          "url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-3321",
          "url": "https://pkg.go.dev/vuln/GO-2024-3321"
        }
      ],
      "release_date": "2024-12-11T18:55:58.506000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-11T21:20:30+00:00",
          "details": "If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.6.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:1334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
    },
    {
      "cve": "CVE-2024-45338",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2024-12-18T21:00:59.938173+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2333122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le"
        ],
        "known_not_affected": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45338"
        },
        {
          "category": "external",
          "summary": "RHBZ#2333122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/637536",
          "url": "https://go.dev/cl/637536"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/70906",
          "url": "https://go.dev/issue/70906"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
          "url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-3333",
          "url": "https://pkg.go.dev/vuln/GO-2024-3333"
        }
      ],
      "release_date": "2024-12-18T20:38:22.660000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-11T21:20:30+00:00",
          "details": "If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.6.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:1334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
    },
    {
      "cve": "CVE-2025-21613",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2025-01-06T17:00:41.244449+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2335888"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport protocol is being used.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go-git: argument injection via the URL field",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity because an argument injection has been discovered in go-git, where an attackers can manipulate git-upload-pack flags, potentially enabling command or code execution leads to an exposure of sensitive data or other unintended actions, this vulnerability occurs exclusively in configurations using the file transport protocol.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
        ],
        "known_not_affected": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-21613"
        },
        {
          "category": "external",
          "summary": "RHBZ#2335888",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2335888"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-21613",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-21613"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-21613",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21613"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m",
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-3368",
          "url": "https://pkg.go.dev/vuln/GO-2025-3368"
        }
      ],
      "release_date": "2025-01-06T16:13:10.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-11T21:20:30+00:00",
          "details": "If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.6.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:1334"
        },
        {
          "category": "workaround",
          "details": "In cases where it is not possible to update to the latest version of go-git, it is recommended to enforce validation rules for values passed in the URL field.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go-git: argument injection via the URL field"
    },
    {
      "cve": "CVE-2025-21614",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-01-06T17:01:36.743039+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2335901"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service (DoS) vulnerability was found in go-git. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which triggers resource exhaustion in go-git clients.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
        ],
        "known_not_affected": [
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
          "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-21614"
        },
        {
          "category": "external",
          "summary": "RHBZ#2335901",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2335901"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-21614",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-21614"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-21614",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21614"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/security/advisories/GHSA-r9px-m959-cxf4",
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-r9px-m959-cxf4"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-3367",
          "url": "https://pkg.go.dev/vuln/GO-2025-3367"
        }
      ],
      "release_date": "2025-01-06T16:20:16.140000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-11T21:20:30+00:00",
          "details": "If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.6.",
          "product_ids": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:1334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:0ae5e45fe68d907fdfc1fdc9d4b040074acb8bc36cf979fe192451d48787707b_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:3e77d381ec1ef080140b8f4d71e3dd078096abd9409a8dfc9ea2b8f38cc66d2b_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d42f1ed5f7e32313c51f59b5e10d2bafba6c51c3f47a53cec92b3bfeefca9e3c_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:13d2f304f1a54b5809649c3118177a310368490ed45af13b385b1bf648a11216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:4eb90f3bb36a84d01e963bddb088c1f29777ba14e3317c4007b2d373c24bc6b5_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-rhel8@sha256:7f6314e00a332f7369908d6f64fed35ce21854ea7cb4e7f492da28fd4feb5256_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:0f2e0de230f704fd915e43aecfa5bb49bbba5ee814b32d606980403f21999dd6_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:2f831bbdc78a748b9be5b92857ba4f66fd357436520c04fe279f6dc1c6139216_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:f667a0644465523f295d7feae6f2e264e127e0e98cadd192519b8be9c4974b37_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:19a9d111b5fb8fc6a01149c56bc4c131dfd418e2ca42f889078e9d015e1ef28b_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:87639cf63f9a0aa09ea8aed99fe8625922e61bd3cae5bbd959e68a825072788c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-main-rhel8@sha256:a98ebdd3991efc207c83306020a4146da2bdc5678eb10efc52113093eb831915_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:0af77978ee01c000b343197ae45812e3579f521d9a7301d7ae9eb25fb0357145_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:56772b736bb1aec1b10d38d4c2b18bcde17b450b55f8c260ac38b23bd6c85b5c_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-operator-bundle@sha256:68e30d15136c47a03a4736e4a8e569bf50593162996b04c76de89d9b541e4f52_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:257f2893d8e4600744a688fdc49499e70242cb4f93b862755b12b29fe83d44db_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:4eda1ddfd36a0a06750640c26a124a9c203bd578d8431145be35be435e0848e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-rhel8-operator@sha256:c617fc54457d6fcbe4d2d93ae575ef714f2ba03b82a557adac71a6408a9a33c7_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9fa462358a39923f6306b016314cbe923dffa46e27b2b53a5a77934f416c840d_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f4f22880b6ea0e5b97dd19c311ec00bf650e670373e14aaa29690481503e2fda_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f77d20eb21bb79808805804465d5e5cdf1f390aa8029a9bad597a0813ff0bf0d_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e4d3444239d131b8e50e60ba8cef0ad270750a99958c246d3c9e1a446e710e3_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:36c603b86b770d2ff35a98665471e6441f51ea56ffb819c6ac3d530e86d1f6c9_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7a5735d8ea892ad522179d10d6c4701798baf1bdbc6ed4b4f555ef2a30738670_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86e6f9339c16c873473c304220e2628593fe85c68ee9d8f7e68bda3db8106a9d_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ad3bfe5d8946806355611ca93d5c7b4cb48e55d21f13131c43690452687f1d41_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb822f22db66571f9cbff1e0f26cb317946f43191da21e2723d8d56663278d80_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:1bf7195f2709e56a3961e58aaf3199b7f696d6f973f98fc91c76153923e72cde_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:aae8aa35d456489ab247e1143e61bce73d20a4eee5337345ac2957b1dd9d2a61_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-rhel8@sha256:da2af83d28dd25c8b2255d299155308c5d03aa2ff507695297090bbef8db2b1f_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:68b336dc6aad04c2003762b310df258750d125e7e3d09743fbb3fb9570d885e7_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d96c936f85a4d733c37f7da7b5dcde27bcad7a154abca48c3ee8f9b7baecc319_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:ee19b41a12ead98be6d8bdedee09e50f9da66057f7de6f6bc0f11021d49a61d9_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:9abbd37870679b1ece3da858f3bc9f107a43203ff43a4aafcb088d3e3803e678_s390x",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b922026dc0b8dc7247ab27ffd8215bf2e958db753355871158ef4e0d5d2df33f_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:de629de8581767a407bfe73eaafd17fedf353a09e8c0f0a18d81605098704af2_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c153ef8bc0473cb3f5f6498c14609c8bddfc5c0fed33442144c79f5d42be190e_amd64",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cbb1e220e27abb38b72ed2dcb8832fd183d26a069df72ab56b57523d8076ae40_ppc64le",
            "8Base-RHACS-4.5:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dc546d7821c65e970d5b5f05fccb98eb220a0328ec5a3c806096113397798ad4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies"
    }
  ]
}

CVE-2024-11831 (GCVE-0-2024-11831)

Vulnerability from cvelistv5 – Published: 2025-02-10 15:27 – Updated: 2026-04-30 13:30

Title

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Summary

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

redhat

References

24 references

URL	Tags
https://access.redhat.com/errata/RHBA-2025:0304	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:0381	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:10853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:1334	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:1468	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21068	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21203	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:3870	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:4511	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8059	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8233	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8479	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8512	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8544	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8551	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:9294	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:1536	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:2769	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8568	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-11831	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2312579	issue-trackingx_refsource_REDHAT
https://github.com/yahoo/serialize-javascript/com…
https://github.com/yahoo/serialize-javascript/pull/173

Impacted products

112 products

Vendor	Product	Version
		Affected: 6.0 , < 6.0.2 (semver)
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.8-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.6-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Ceph Storage 7.1	Unaffected: 2:18.2.1-381.el8cp , < * (rpm) cpe:/a:redhat:ceph_storage:7.1::el8 cpe:/a:redhat:ceph_storage:7.1::el9
Red Hat	Red Hat Ceph Storage 8.1	Unaffected: 2:19.2.1-292.el9cp , < * (rpm) cpe:/a:redhat:ceph_storage:8.1::el9
Red Hat	Red Hat Ceph Storage 9.0	Unaffected: 2:20.1.0-144.el10cp , < * (rpm) cpe:/a:redhat:ceph_storage:9.0::el10 cpe:/a:redhat:ceph_storage:9.0::el9
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:8.0.112-1.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:8.0.112-1.el9_5 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	RHODF-4.14-RHEL-9	Unaffected: v4.14.18-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.14::el9
Red Hat	RHODF-4.14-RHEL-9	Unaffected: v4.14.18-3 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.14::el9
Red Hat	RHODF-4.14-RHEL-9	Unaffected: v4.14.18-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.14::el9
Red Hat	RHODF-4.15-RHEL-9	Unaffected: v4.15.14-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.15::el9
Red Hat	RHODF-4.15-RHEL-9	Unaffected: v4.15.14-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.15::el9
Red Hat	RHODF-4.15-RHEL-9	Unaffected: v4.15.14-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.15::el9
Red Hat	RHODF-4.16-RHEL-9	Unaffected: v4.16.10-4 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	RHODF-4.16-RHEL-9	Unaffected: v4.16.10-4 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	RHODF-4.16-RHEL-9	Unaffected: v4.16.10-3 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	RHODF-4.17-RHEL-9	Unaffected: v4.17.7-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	RHODF-4.17-RHEL-9	Unaffected: v4.17.7-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	RHODF-4.17-RHEL-9	Unaffected: v4.17.7-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	RHODF-4.18-RHEL-9	Unaffected: v4.18.2-8 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	RHODF-4.18-RHEL-9	Unaffected: v4.18.2-7 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	RHODF-4.18-RHEL-9	Unaffected: v4.18.2-8 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Ceph Storage 8	Unaffected: 8 , < * (rpm) cpe:/a:redhat:ceph_storage:8::el9
Red Hat	Red Hat Ceph Storage 9	Unaffected: 1776359884 , < * (rpm) cpe:/a:redhat:ceph_storage:9.0::el9
Red Hat	Red Hat OpenShift Pipelines 1.14.6	Unaffected: v1.14.6-1744143767 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.14::el8
Red Hat	Red Hat OpenShift Pipelines 1.15	Unaffected: v1.15.3-1746939886 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.15::el8
Red Hat	Red Hat OpenShift Pipelines 1.15	Unaffected: v1.15.3-1746936251 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.15::el8
Red Hat	Red Hat OpenShift Pipelines 1.16	Unaffected: v1.16.4-1747983385 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.16::el8
Red Hat	Red Hat OpenShift Pipelines 1.16	Unaffected: v1.16.4-1747979846 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.16::el8
Red Hat	Red Hat OpenShift Pipelines 1.17	Unaffected: v1.17.2-1749452800 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.17::el8
Red Hat	Red Hat OpenShift Pipelines 1.17	Unaffected: v1.17.2-1750066936 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.17::el8
Red Hat	Red Hat OpenShift Pipelines 1.18.0	Unaffected: v1.18.1-1747749913 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.18::el9
Red Hat	Red Hat OpenShift Pipelines 1.19	Unaffected: v1.19.0-1752127853 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.19::el9
Red Hat	Cryostat 3	cpe:/a:redhat:cryostat:3
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Migration Toolkit for Virtualization	cpe:/a:redhat:migration_toolkit_virtualization:2
Red Hat	.NET 6.0 on Red Hat Enterprise Linux	cpe:/a:redhat:rhel_dotnet:6.0
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat build of OptaPlanner 8	cpe:/a:redhat:optaplanner:::el6
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Data Grid 8	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Discovery 1	cpe:/a:redhat:discovery:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat Integration Camel K 1	cpe:/a:redhat:integration:1
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 3.11	cpe:/a:redhat:openshift:3.11
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat Process Automation 7	cpe:/a:redhat:jboss_enterprise_bpms_platform:7
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Single Sign-On 7	cpe:/a:redhat:red_hat_single_sign_on:7
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:1

Date Public

2024-09-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-11831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T17:08:31.160473Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-10T17:08:44.112Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/yahoo/serialize-javascript",
          "packageName": "serialize-javascript",
          "versions": [
            {
              "lessThan": "6.0.2",
              "status": "affected",
              "version": "6.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-main-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.8-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-main-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.6-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7.1::el8",
            "cpe:/a:redhat:ceph_storage:7.1::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ceph",
          "product": "Red Hat Ceph Storage 7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:18.2.1-381.el8cp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8.1::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ceph",
          "product": "Red Hat Ceph Storage 8.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:19.2.1-292.el9cp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9.0::el10",
            "cpe:/a:redhat:ceph_storage:9.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ceph",
          "product": "Red Hat Ceph Storage 9.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:20.1.0-144.el10cp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "dotnet8.0",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0.112-1.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "dotnet8.0",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0.112-1.el9_5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.14-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.14.18-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.14-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.14.18-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.14-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.14.18-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.15-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.14-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.15-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.14-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.15-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.14-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.16-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.10-4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.16-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.10-4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.16-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.10-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.17-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.7-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.17-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.7-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.17-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.7-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.18-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.2-8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.18-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.2-7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.18-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.2-8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-8-rhel9",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-9-rhel9",
          "product": "Red Hat Ceph Storage 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1776359884",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.14::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.14.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.14.6-1744143767",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.15::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.15.3-1746939886",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.15::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.15.3-1746936251",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.16::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.16.4-1747983385",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.16::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.16.4-1747979846",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.17::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.17.2-1749452800",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.17::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.17.2-1750066936",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
          "product": "Red Hat OpenShift Pipelines 1.18.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.18.1-1747749913",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
          "product": "Red Hat OpenShift Pipelines 1.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.19.0-1752127853",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:cryostat:3"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Cryostat 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:logging:5"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-logging/kibana6-rhel8",
          "product": "Logging Subsystem for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:migration_toolkit_virtualization:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
          "product": "Migration Toolkit for Virtualization",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_dotnet:6.0"
          ],
          "defaultStatus": "unknown",
          "packageName": "rh-dotnet60-dotnet",
          "product": ".NET 6.0 on Red Hat Enterprise Linux",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_lightspeed"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-lightspeed-beta/lightspeed-console-plugin-rhel9",
          "product": "OpenShift Lightspeed",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-api-rhel8",
          "product": "OpenShift Pipelines",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-db-migration-rhel8",
          "product": "OpenShift Pipelines",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "OpenShift Pipelines",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:serverless:1"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "OpenShift Serverless",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:service_mesh:2"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
          "product": "OpenShift Service Mesh 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:service_mesh:2"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-service-mesh/kiali-rhel8",
          "product": "OpenShift Service Mesh 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:red_hat_3scale_amp:2"
          ],
          "defaultStatus": "affected",
          "packageName": "3scale-amp-system-container",
          "product": "Red Hat 3scale API Management Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhacm2/console-rhel8",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "aap-cloud-ui-container",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-eda-controller",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:apache_camel_hawtio:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat build of Apache Camel - HawtIO 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:service_registry:2"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat build of Apicurio Registry 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:optaplanner:::el6"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat build of OptaPlanner 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "grafana",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7"
          ],
          "defaultStatus": "affected",
          "packageName": "libarrow",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pybind",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "grafana",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8"
          ],
          "defaultStatus": "affected",
          "packageName": "pybind",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9"
          ],
          "defaultStatus": "affected",
          "packageName": "libarrow",
          "product": "Red Hat Ceph Storage 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9"
          ],
          "defaultStatus": "affected",
          "packageName": "pybind",
          "product": "Red Hat Ceph Storage 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_data_grid:8"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Data Grid 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhdh:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhdh-hub-container",
          "product": "Red Hat Developer Hub",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:discovery:1"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery-server-container",
          "product": "Red Hat Discovery 1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "dotnet8.0",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "dotnet6.0",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "grafana",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pcs",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unknown",
          "packageName": "dotnet6.0",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unknown",
          "packageName": "dotnet7.0",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pcs",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_fuse:7"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Fuse 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:integration:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Integration Camel K 1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat JBoss Enterprise Application Platform 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jbosseapxp"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "unaffected",
          "packageName": "odh-dashboard-container",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-dashboard-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-data-science-pipelines-argo-argoexec-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-data-science-pipelines-argo-workflowcontroller-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-kf-notebook-controller-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-api-server-v2-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-driver-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-launcher-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-persistenceagent-v2-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-scheduledworkflow-v2-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-model-registry-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "unaffected",
          "packageName": "odh-notebook-controller-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "unaffected",
          "packageName": "odh-operator-container",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:3.11"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift3/ose-console",
          "product": "Red Hat OpenShift Container Platform 3.11",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-monitoring-plugin-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3"
          ],
          "defaultStatus": "affected",
          "packageName": "devspaces/code-rhel8",
          "product": "Red Hat OpenShift Dev Spaces",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3"
          ],
          "defaultStatus": "affected",
          "packageName": "devspaces/dashboard-rhel8",
          "product": "Red Hat OpenShift Dev Spaces",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3"
          ],
          "defaultStatus": "affected",
          "packageName": "devspaces/traefik-rhel8",
          "product": "Red Hat OpenShift Dev Spaces",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-agent-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-all-in-one-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-collector-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-es-index-cleaner-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-es-rollover-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-ingester-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-query-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Process Automation 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:quay:3"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:satellite:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "nodejs-compression-webpack-plugin",
          "product": "Red Hat Satellite 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:satellite:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "nodejs-webpack",
          "product": "Red Hat Satellite 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:red_hat_single_sign_on:7"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Single Sign-On 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:trusted_profile_analyzer:1"
          ],
          "defaultStatus": "affected",
          "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
          "product": "Red Hat Trusted Profile Analyzer",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-09-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-30T13:30:50.067Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHBA-2025:0304",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHBA-2025:0304"
        },
        {
          "name": "RHSA-2025:0381",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:0381"
        },
        {
          "name": "RHSA-2025:10853",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:10853"
        },
        {
          "name": "RHSA-2025:1334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:1334"
        },
        {
          "name": "RHSA-2025:1468",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:1468"
        },
        {
          "name": "RHSA-2025:21068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21068"
        },
        {
          "name": "RHSA-2025:21203",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21203"
        },
        {
          "name": "RHSA-2025:3870",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:3870"
        },
        {
          "name": "RHSA-2025:4511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:4511"
        },
        {
          "name": "RHSA-2025:8059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8059"
        },
        {
          "name": "RHSA-2025:8078",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8078"
        },
        {
          "name": "RHSA-2025:8233",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8233"
        },
        {
          "name": "RHSA-2025:8479",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8479"
        },
        {
          "name": "RHSA-2025:8512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8512"
        },
        {
          "name": "RHSA-2025:8544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8544"
        },
        {
          "name": "RHSA-2025:8551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8551"
        },
        {
          "name": "RHSA-2025:9294",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:9294"
        },
        {
          "name": "RHSA-2026:1536",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:1536"
        },
        {
          "name": "RHSA-2026:2769",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:2769"
        },
        {
          "name": "RHSA-2026:8568",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:8568"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
        },
        {
          "name": "RHBZ#2312579",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312579"
        },
        {
          "url": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"
        },
        {
          "url": "https://github.com/yahoo/serialize-javascript/pull/173"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-09-16T16:43:32.021Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-09-16T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-11831",
    "datePublished": "2025-02-10T15:27:46.732Z",
    "dateReserved": "2024-11-26T18:56:38.187Z",
    "dateUpdated": "2026-04-30T13:30:50.067Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-45337 (GCVE-0-2024-45337)

Vulnerability from cvelistv5 – Published: 2024-12-11 18:55 – Updated: 2025-02-18 20:48

Title

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

Summary

Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to authenticate." Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-1108 - Excessive Reliance on Global Variables

Assigner

References

5 references

URL	Tags
https://github.com/golang/crypto/commit/b4f1988a3…
https://go.dev/cl/635315
https://go.dev/issue/70779
https://groups.google.com/g/golang-announce/c/-nP…
https://pkg.go.dev/vuln/GO-2024-3321

Impacted products

1 product

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.31.0 (semver)

Credits

Damien Tournoud (Platform.sh / Upsun) Patrick Dawkins (Platform.sh / Upsun) Vince Parker (Platform.sh / Upsun) Jules Duvivier (Platform.sh / Upsun)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-01-31T15:02:46.088Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/12/11/2"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20250131-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-45337",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-12T17:57:55.896008Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-12T17:58:29.810Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "ServerConfig.PublicKeyCallback"
            },
            {
              "name": "connection.serverAuthenticate"
            },
            {
              "name": "NewServerConn"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.31.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Damien Tournoud (Platform.sh / Upsun)"
        },
        {
          "lang": "en",
          "value": "Patrick Dawkins (Platform.sh / Upsun)"
        },
        {
          "lang": "en",
          "value": "Vince Parker (Platform.sh / Upsun)"
        },
        {
          "lang": "en",
          "value": "Jules Duvivier (Platform.sh / Upsun)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that \"A call to this function does not guarantee that the key offered is in fact used to authenticate.\" Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1108: Excessive Reliance on Global Variables",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T20:48:40.404Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
        },
        {
          "url": "https://go.dev/cl/635315"
        },
        {
          "url": "https://go.dev/issue/70779"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2024-3321"
        }
      ],
      "title": "Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2024-45337",
    "datePublished": "2024-12-11T18:55:58.506Z",
    "dateReserved": "2024-08-27T19:41:58.555Z",
    "dateUpdated": "2025-02-18T20:48:40.404Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-45338 (GCVE-0-2024-45338)

Vulnerability from cvelistv5 – Published: 2024-12-18 20:38 – Updated: 2025-02-21 18:03

Title

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Summary

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

References

4 references

URL	Tags
https://go.dev/cl/637536
https://go.dev/issue/70906
https://groups.google.com/g/golang-announce/c/wSC…
https://pkg.go.dev/vuln/GO-2024-3333

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.33.0 (semver)

Credits

Guido Vranken

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-45338",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-31T19:51:42.228627Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1333",
                "description": "CWE-1333 Inefficient Regular Expression Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-31T19:55:04.864Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-02-21T18:03:32.301Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250221-0001/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parseDoctype"
            },
            {
              "name": "htmlIntegrationPoint"
            },
            {
              "name": "inTableIM"
            },
            {
              "name": "inBodyIM"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.33.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Guido Vranken"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-405: Asymmetric Resource Consumption (Amplification)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-18T20:38:22.660Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/637536"
        },
        {
          "url": "https://go.dev/issue/70906"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2024-3333"
        }
      ],
      "title": "Non-linear parsing of case-insensitive content in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2024-45338",
    "datePublished": "2024-12-18T20:38:22.660Z",
    "dateReserved": "2024-08-27T19:41:58.555Z",
    "dateUpdated": "2025-02-21T18:03:32.301Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-21613 (GCVE-0-2025-21613)

Vulnerability from cvelistv5 – Published: 2025-01-06 16:13 – Updated: 2025-01-06 16:45

Title

go-git has an Argument Injection via the URL field

Summary

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear

CWE

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/go-git/go-git/security/advisor…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
go-git	go-git	Affected: >= 4.0.0, < 5.13.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-21613",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-06T16:38:34.120792Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-88",
                "description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-06T16:45:02.671Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "go-git",
          "vendor": "go-git",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0,  \u003c 5.13.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-06T16:13:10.611Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m"
        }
      ],
      "source": {
        "advisory": "GHSA-v725-9546-7q7m",
        "discovery": "UNKNOWN"
      },
      "title": "go-git has an Argument Injection via the URL field"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-21613",
    "datePublished": "2025-01-06T16:13:10.611Z",
    "dateReserved": "2024-12-29T03:00:24.713Z",
    "dateUpdated": "2025-01-06T16:45:02.671Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-21614 (GCVE-0-2025-21614)

Vulnerability from cvelistv5 – Published: 2025-01-06 16:20 – Updated: 2025-08-26 19:48

Title

go-git clients vulnerable to DoS via maliciously crafted Git server replies

Summary

go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/go-git/go-git/security/advisor…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
go-git	go-git	Affected: >= 4.0.0, < 5.13.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-21614",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-06T16:34:38.131709Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T19:48:04.692Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "go-git",
          "vendor": "go-git",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 5.13.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-06T16:20:16.140Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/go-git/go-git/security/advisories/GHSA-r9px-m959-cxf4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-r9px-m959-cxf4"
        }
      ],
      "source": {
        "advisory": "GHSA-r9px-m959-cxf4",
        "discovery": "UNKNOWN"
      },
      "title": "go-git clients vulnerable to DoS via maliciously crafted Git server replies"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-21614",
    "datePublished": "2025-01-06T16:20:16.140Z",
    "dateReserved": "2024-12-29T03:00:24.713Z",
    "dateUpdated": "2025-08-26T19:48:04.692Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2025:1334

CVE-2024-11831 (GCVE-0-2024-11831)

CVE-2024-45337 (GCVE-0-2024-45337)

CVE-2024-45338 (GCVE-0-2024-45338)

CVE-2025-21613 (GCVE-0-2025-21613)

CVE-2025-21614 (GCVE-0-2025-21614)

Tags

Sightings

Nomenclature