Vulnerability-Lookup

RHSA-2026:20946

Vulnerability from csaf_redhat - Published: 2026-05-26 14:54 - Updated: 2026-05-30 03:14

Summary

Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.6 security update

Severity

Important

Notes

Topic: Important: Red Hat OpenShift GitOps v1.18.6 security update

Details: An update is now available for Red Hat OpenShift GitOps.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-4800

A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64	—	Workaround

Threats

Impact Important

CVE-2026-32281

A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-33186

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x	—	Vendor Fix fix Workaround

Known not affected 33 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64	—	Workaround

Threats

Impact Important

CVE-2026-33487

A flaw was found in goxmlsig, a Go library for XML Digital Signatures. This vulnerability arises from a programming error, specifically a loop variable capture issue, within the `validateSignature` function. When processing XML Digital Signatures, this error can cause the system to incorrectly validate the signature, potentially allowing an attacker to bypass integrity checks. This issue affects Go versions before 1.22 or projects using older `go.mod` configurations.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64	—	Workaround

Threats

Impact Important

CVE-2026-34986

A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64	—	Workaround

Threats

Impact Important

References

40 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:20946	self
https://access.redhat.com/security/cve/CVE-2026-32281	external
https://access.redhat.com/security/cve/CVE-2026-33186	external
https://access.redhat.com/security/cve/CVE-2026-33487	external
https://access.redhat.com/security/cve/CVE-2026-34986	external
https://access.redhat.com/security/cve/CVE-2026-4800	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-4800	self
https://bugzilla.redhat.com/show_bug.cgi?id=2453496	external
https://www.cve.org/CVERecord?id=CVE-2026-4800	external
https://nvd.nist.gov/vuln/detail/CVE-2026-4800	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/advisories/GHSA-35jh-r3h4-6jhm	external
https://github.com/lodash/lodash/commit/3469357cf…	external
https://access.redhat.com/security/cve/CVE-2026-32281	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456333	external
https://www.cve.org/CVERecord?id=CVE-2026-32281	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32281	external
https://go.dev/cl/758061	external
https://go.dev/issue/78281	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4946	external
https://access.redhat.com/security/cve/CVE-2026-33186	self
https://bugzilla.redhat.com/show_bug.cgi?id=2449833	external
https://www.cve.org/CVERecord?id=CVE-2026-33186	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33186	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-33487	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451814	external
https://www.cve.org/CVERecord?id=CVE-2026-33487	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33487	external
https://github.com/russellhaering/goxmldsig/secur…	external
https://access.redhat.com/security/cve/CVE-2026-34986	self
https://bugzilla.redhat.com/show_bug.cgi?id=2455470	external
https://www.cve.org/CVERecord?id=CVE-2026-34986	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34986	external
https://github.com/go-jose/go-jose/security/advis…	external
https://pkg.go.dev/github.com/go-jose/go-jose/v4#…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Important: Red Hat OpenShift GitOps v1.18.6 security update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for Red Hat OpenShift GitOps.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:20946",
        "url": "https://access.redhat.com/errata/RHSA-2026:20946"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33487",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33487"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4800"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.18/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.18/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20946.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.6 security update",
    "tracking": {
      "current_release_date": "2026-05-30T03:14:43+00:00",
      "generator": {
        "date": "2026-05-30T03:14:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:20946",
      "initial_release_date": "2026-05-26T14:54:58+00:00",
      "revision_history": [
        {
          "date": "2026-05-26T14:54:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-26T14:55:01+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-30T03:14:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift GitOps 1.18",
                "product": {
                  "name": "Red Hat OpenShift GitOps 1.18",
                  "product_id": "Red Hat OpenShift GitOps 1.18",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_gitops:1.18::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift GitOps"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Aa4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779116461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3Adcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779115298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3A4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779115163"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779115192"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779116502"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779115545"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3A45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779116359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3A27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779116228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3A323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779115144"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-operator-bundle@sha256%3Acf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1779118126"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3Ad784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779114978"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779116461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3A1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779115298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3Abd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779115163"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779115192"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Aec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779116502"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779115545"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3A567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779116359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3Aba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779116228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3A9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779115144"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3A09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779114978"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Acd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779116461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3A355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779115298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3A4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779115163"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Abd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779115192"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779116502"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779115545"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3A7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779116359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3A0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779116228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3A2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779115144"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3Ab628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779114978"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779116461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3Ad06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779115298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3A55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779115163"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Aad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779115192"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Abb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779116502"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779115545"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3Ab567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779116359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3Af084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779116228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3Ae72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779115144"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3A7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779114978"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64 as a component of Red Hat OpenShift GitOps 1.18",
          "product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-4800",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-03-31T20:01:21.918257+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2453496"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4800"
        },
        {
          "category": "external",
          "summary": "RHBZ#2453496",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
          "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
        },
        {
          "category": "external",
          "summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
          "url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
        }
      ],
      "release_date": "2026-03-31T19:25:55.987000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T14:54:58+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:20946"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
    },
    {
      "cve": "CVE-2026-32281",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-04-08T02:01:00.930989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758061",
          "url": "https://go.dev/cl/758061"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78281",
          "url": "https://go.dev/issue/78281"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4946",
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "release_date": "2026-04-08T01:06:58.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T14:54:58+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:20946"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T14:54:58+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:20946"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-33487",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-26T18:02:32.278778+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451814"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in goxmlsig, a Go library for XML Digital Signatures. This vulnerability arises from a programming error, specifically a loop variable capture issue, within the `validateSignature` function. When processing XML Digital Signatures, this error can cause the system to incorrectly validate the signature, potentially allowing an attacker to bypass integrity checks. This issue affects Go versions before 1.22 or projects using older `go.mod` configurations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451814",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451814"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33487",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc",
          "url": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc"
        }
      ],
      "release_date": "2026-03-26T17:17:51.101000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T14:54:58+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:20946"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue"
    },
    {
      "cve": "CVE-2026-34986",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-06T17:01:34.639203+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
          "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "release_date": "2026-04-06T16:22:45.353000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T14:54:58+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:20946"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:11d3830c3d9691d77aa1413af45a1bce1aca931b000e7f5da75172fb76c4145b_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:6fc8c53df3e32e265886d662c4acb4afc5ea290e31d1435d7ec1e0e2678daca5_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4e3a3345862f1dbefe620bce99794e01fca58e650f3291ec4519a953398e726_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cd70a3fa917e91985111bfe950282be66e89ba08d32bb32186126e8df1f56acd_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4cc779a08ad6832c88e680e2e82a931459aea07691d2db7246e12dc66bb9fe2f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:4d138120e590ac5c5d007f07abae74c68d06e0b137cb60de44644c1ad351bc61_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:55bc37227d5b0ec3626ab92ccf9d6d594ad4233d7b11fc0bfead2b7f1ae3f825_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:bd95b790234bf8524db5c024b2e5f6f2457b4f3c72b1476fc73a5a2f64077dd6_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:12a6fb97bd7ebe6f9c04e04a5fc302343b7bf6fcd95e365efad7861fbe502d3b_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:2d8b62a8209079daeaeab25881089c160f1585658fd954619ba2ca2fa7185ecd_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ad940c4fd6e141a04fb58da780443d2c24945759de6380b6328ef1fa2e8e1f57_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:bd139d8c24c811320221406edbb7a66618e174ca538c3784a73feb60a0558a0a_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1101419bfdba559e9bb01a4cd28517393e6ff4a01a73fd46e6328ea6846e7fb5_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:355472dfe72924d5e1e1dc24553a2fd7f3f79d4751f3df52ee04fa903658e4d2_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d06ac49a21994874eb28b8c6a0f5acb4d09999d723dd887436210d047e80153d_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:dcead116f99d5c00012dd9207156048142ee24bc70862f36a7bcf894e5ae1ee9_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:68019fbee61af5ef1368e3e496e462d2f9dbe5a96fa817f9326ec14d907fb0c6_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8ee41b5ede1963eead37122685b2201a61859e6ef416098dc9a8d584d0be3e62_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb58c6d2b73a99a564f7ef9c142ee39a6405cddead621cc9ac70cf424f1a79a6_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ec84b7694e343de23afb17e7e12445babb38be2c353456f5924ffe2909161432_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:0ad1db16a7868c92ff6fe5e0a019ccbb24b96de1b382564ae2470cd907498b12_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4ba81a63701fcb3a5f726035aa27b044a960456cfa6f8bb84078e1f6af0bcf00_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:5d6d5f2382315719bb2e02124d58226ac86d3639c061c2b4107ea079a0787966_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6a7901155bd171509d8d1181784cb51574468e728232b7565a9b724a43e31390_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:567aaa242d33749676a4da80d41b6e3b98b0d589307b59c975b803e87dfef2f2_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7ba98db93e1874366433a09d4c63c302ea645431b7666d31c6664acd79cf60b6_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b567fe32d1e685fbad4625ed93b2592821590117d4722cb7a398005be87a4654_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:cf81d0157a9065d04ab880096a613e0400c4bcda36f01eeb94879389cec30159_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2c6e1ccc3c675bd81fc997b4427604815dbf254b026c0aae299d08bf92df2384_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:323104509716a3c2c6fc494660a5355ea5d84eb8567f0f4b7285fa432801c0cc_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:9181d851aea9b7dacb5f855dbf2bffbb560a4c1d812b66141524bbc7e39d74d3_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e72f323007da1fb29c1fdc89c548910e1517018ed3ca2ea5708a55d582f492e2_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c674dbabf2cd80152999e9c702a0bd9a51819b0f28d21234b91751693a95948_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27c2e6772639c2a5d3b4250997fd7a42c3b55c825bdc3f9d706e0b276ccabbff_amd64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ba02a6b9e6f223846b03704c2ced23a52c101cfab2e719e6a129081e84cb1416_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f084311d293185a914d0369489f4c75c3d5fd71f63dd4f34245c5a59481c83ef_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:09b9a7d4bba32bf250d8c20283ca016b130dea0bd91a29afd0c06cd73607d51d_arm64",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7ca2257af92a2f9887b9f31a17cbf0f0a10c43df24b72824cb4514de5642a218_s390x",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b628e71fca45b7bba88350fec64a10843ccfa3c42269445f3f4f11cdf6b5b03f_ppc64le",
            "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d784c8cdfa070628bd611cb10658e5a8f2e0640eaa5104e1c37c739da4d07401_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
    }
  ]
}

CVE-2026-32281 (GCVE-0-2026-32281)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-04-13 18:19

Title

Inefficient policy validation in crypto/x509

Summary

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

References

4 references

URL	Tags
https://go.dev/cl/758061
https://go.dev/issue/78281
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4946

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)

Credits

Jakub Ciolek - https://ciolek.dev

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32281",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T17:52:37.734298Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:19:44.779Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "policiesValid"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:58.354Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/758061"
        },
        {
          "url": "https://go.dev/issue/78281"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "title": "Inefficient policy validation in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32281",
    "datePublished": "2026-04-08T01:06:58.354Z",
    "dateReserved": "2026-03-11T16:38:46.556Z",
    "dateUpdated": "2026-04-13T18:19:44.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33186 (GCVE-0-2026-33186)

Vulnerability from cvelistv5 – Published: 2026-03-20 22:23 – Updated: 2026-03-24 18:09

Title

gRPC-Go has an authorization bypass via missing leading slash in :path

Summary

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-285 - Improper Authorization

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.79.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33186",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-24T18:08:38.989284Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-24T18:09:13.422Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.79.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285: Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-20T22:23:32.147Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "source": {
        "advisory": "GHSA-p77j-4mvh-x3m3",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go has an authorization bypass via missing leading slash in :path"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-33186",
    "datePublished": "2026-03-20T22:23:32.147Z",
    "dateReserved": "2026-03-17T22:16:36.720Z",
    "dateUpdated": "2026-03-24T18:09:13.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33487 (GCVE-0-2026-33487)

Vulnerability from cvelistv5 – Published: 2026-03-26 17:17 – Updated: 2026-03-30 11:16

Title

goxmldsig has validateSignature Loop Variable Capture Signature Bypass

Summary

goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the references in the `SignedInfo` block to find one that matches the signed element's ID. In Go versions before 1.22, or when `go.mod` uses an older version, there is a loop variable capture issue. The code takes the address of the loop variable `_ref` instead of its value. As a result, if more than one reference matches the ID or if the loop logic is incorrect, the `ref` pointer will always end up pointing to the last element in the `SignedInfo.References` slice after the loop. goxmlsig version 1.6.0 contains a patch.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-347 - Improper Verification of Cryptographic Signature
CWE-682 - Incorrect Calculation

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/russellhaering/goxmldsig/secur…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
russellhaering	goxmldsig	Affected: < 1.6.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33487",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-30T11:16:13.379400Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-30T11:16:34.970Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "goxmldsig",
          "vendor": "russellhaering",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.6.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the references in the `SignedInfo` block to find one that matches the signed element\u0027s ID. In Go versions before 1.22, or when `go.mod` uses an older version, there is a loop variable capture issue. The code takes the address of the loop variable `_ref` instead of its value. As a result, if more than one reference matches the ID or if the loop logic is incorrect, the `ref` pointer will always end up pointing to the last element in the `SignedInfo.References` slice after the loop. goxmlsig version 1.6.0 contains a patch."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-682",
              "description": "CWE-682: Incorrect Calculation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-26T17:17:51.101Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc"
        }
      ],
      "source": {
        "advisory": "GHSA-479m-364c-43vc",
        "discovery": "UNKNOWN"
      },
      "title": "goxmldsig has validateSignature Loop Variable Capture Signature Bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-33487",
    "datePublished": "2026-03-26T17:17:51.101Z",
    "dateReserved": "2026-03-20T16:16:48.971Z",
    "dateUpdated": "2026-03-30T11:16:34.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-34986 (GCVE-0-2026-34986)

Vulnerability from cvelistv5 – Published: 2026-04-06 16:22 – Updated: 2026-04-07 14:21

Title

Go JOSE affect by a panic in JWE decryption

Summary

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-248 - Uncaught Exception

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/go-jose/go-jose/security/advis…	x_refsource_CONFIRM
https://pkg.go.dev/github.com/go-jose/go-jose/v4#…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
go-jose	go-jose	Affected: >= 4.0.0, < 4.1.4 Affected: < 3.0.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34986",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-07T14:21:42.477191Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-07T14:21:54.041Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "go-jose",
          "vendor": "go-jose",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.1.4"
            },
            {
              "status": "affected",
              "version": "\u003c 3.0.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-06T16:22:45.353Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "name": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "source": {
        "advisory": "GHSA-78h2-9frx-2jm8",
        "discovery": "UNKNOWN"
      },
      "title": "Go JOSE affect by a panic in JWE decryption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-34986",
    "datePublished": "2026-04-06T16:22:45.353Z",
    "dateReserved": "2026-03-31T19:38:31.617Z",
    "dateUpdated": "2026-04-07T14:21:54.041Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4800 (GCVE-0-2026-4800)

Vulnerability from cvelistv5 – Published: 2026-03-31 19:25 – Updated: 2026-03-31 20:37

Title

lodash vulnerable to Code Injection via `_.template` imports key names

Summary

Impact: The fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function(). Patches: Users should upgrade to version 4.18.0. Workarounds: Do not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

openjs

References

3 references

URL	Tags
https://github.com/advisories/GHSA-35jh-r3h4-6jhm
https://github.com/lodash/lodash/commit/3469357cf…
https://cna.openjsf.org/security-advisories.html

Impacted products

4 products

Vendor	Product	Version
lodash	lodash	Affected: 4.0.0 , < 4.18.0 (semver) Unaffected: 4.18.0 (semver)
lodash	lodash-es	Affected: 4.0.0 , < 4.18.0 (semver) Unaffected: 4.18.0 (semver)
lodash	lodash-amd	Affected: 4.0.0 , < 4.18.0 (semver) Unaffected: 4.18.0 (semver)
lodash	lodash.template	Affected: 4.0.0 , < 4.18.0 (semver) Unaffected: 4.18.0 (semver)

Credits

dolevmiz1 bugbunny-research M0nd0R UlisesGascon falsyvalues jonchurch threalwinky jdalton

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4800",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-31T20:36:55.080392Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-31T20:37:03.964Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/lodash",
          "product": "lodash",
          "vendor": "lodash",
          "versions": [
            {
              "lessThan": "4.18.0",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/lodash-es",
          "product": "lodash-es",
          "vendor": "lodash",
          "versions": [
            {
              "lessThan": "4.18.0",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/lodash-amd",
          "product": "lodash-amd",
          "vendor": "lodash",
          "versions": [
            {
              "lessThan": "4.18.0",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/lodash.template",
          "product": "lodash.template",
          "vendor": "lodash",
          "versions": [
            {
              "lessThan": "4.18.0",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.18.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "dolevmiz1"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "bugbunny-research"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "M0nd0R"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "UlisesGascon"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "falsyvalues"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "jonchurch"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "threalwinky"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "jdalton"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Impact:\n\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\n\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\n\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\n\nPatches:\n\nUsers should upgrade to version 4.18.0.\n\nWorkarounds:\n\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names."
            }
          ],
          "value": "Impact:\n\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\n\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\n\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\n\nPatches:\n\nUsers should upgrade to version 4.18.0.\n\nWorkarounds:\n\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-31T19:25:55.987Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
        },
        {
          "url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "lodash vulnerable to Code Injection via `_.template` imports key names",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-4800",
    "datePublished": "2026-03-31T19:25:55.987Z",
    "dateReserved": "2026-03-25T09:12:38.355Z",
    "dateUpdated": "2026-03-31T20:37:03.964Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:20946

CVE-2026-32281 (GCVE-0-2026-32281)

CVE-2026-33186 (GCVE-0-2026-33186)

CVE-2026-33487 (GCVE-0-2026-33487)

CVE-2026-34986 (GCVE-0-2026-34986)

CVE-2026-4800 (GCVE-0-2026-4800)

Tags

Sightings

Nomenclature