Vulnerability-Lookup

RHSA-2026:21692

Vulnerability from csaf_redhat - Published: 2026-06-04 15:15 - Updated: 2026-06-05 09:03

Summary

Red Hat Security Advisory: OpenShift Container Platform 4.13.67 security and extras update

Severity

Important

Notes

Topic: Red Hat OpenShift Container Platform release 4.13.67 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.67. See the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2026:21691 Security Fix(es): None For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-33186

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64	—	Vendor Fix fix Workaround

Known not affected 34 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64	—	Workaround

Threats

Impact Important

CVE-2026-35469

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64	—	Vendor Fix fix Workaround

Known not affected 35 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64	—	Workaround

Threats

Impact Important

References

14 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:21692	self
https://access.redhat.com/security/cve/CVE-2026-33186	external
https://access.redhat.com/security/cve/CVE-2026-35469	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33186	self
https://bugzilla.redhat.com/show_bug.cgi?id=2449833	external
https://www.cve.org/CVERecord?id=CVE-2026-33186	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33186	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-35469	self
https://bugzilla.redhat.com/show_bug.cgi?id=2457729	external
https://www.cve.org/CVERecord?id=CVE-2026-35469	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35469	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.13.67 is now available with updates to packages and images that fix several bugs.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.13.\n\nRed Hat Product Security has rated this update as having a security impact of  Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.67. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHSA-2026:21691\n\nSecurity Fix(es):\n\nNone\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:21692",
        "url": "https://access.redhat.com/errata/RHSA-2026:21692"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21692.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.13.67 security and extras update",
    "tracking": {
      "current_release_date": "2026-06-05T09:03:04+00:00",
      "generator": {
        "date": "2026-06-05T09:03:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.2"
        }
      },
      "id": "RHSA-2026:21692",
      "initial_release_date": "2026-06-04T15:15:45+00:00",
      "revision_history": [
        {
          "date": "2026-06-04T15:15:45+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-04T15:16:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T09:03:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.13",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.13",
                  "product_id": "Red Hat OpenShift Container Platform 4.13",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.13::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Container Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
                  "product_id": "registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/frr-rhel8@sha256%3A1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/frr-rhel8\u0026tag=1779863354"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cloud-event-proxy@sha256%3Ae21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy\u0026tag=1779889584"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cloud-event-proxy@sha256%3Ae21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8\u0026tag=1779889584"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cluster-nfd-operator@sha256%3A5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-nfd-operator\u0026tag=1779889662"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-http-proxy@sha256%3A53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-http-proxy\u0026tag=1779863982"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel8@sha256%3A85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8\u0026tag=1779864319"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel8-operator@sha256%3Af08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator\u0026tag=1779863941"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-infiniband-cni@sha256%3A01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-infiniband-cni\u0026tag=1779863998"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ptp@sha256%3A514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp\u0026tag=1779863999"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-diskmaker-rhel9@sha256%3A2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9\u0026tag=1779777713"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-mustgather-rhel9@sha256%3Aca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9\u0026tag=1779892323"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-rhel9-operator@sha256%3A74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-rhel9-operator\u0026tag=1779889676"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-node-feature-discovery@sha256%3Adfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-node-feature-discovery\u0026tag=1779889656"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ansible-operator@sha256%3A11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ansible-operator\u0026tag=1779889816"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cluster-capacity@sha256%3A973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-capacity\u0026tag=1779889601"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-dns-proxy@sha256%3A5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-dns-proxy\u0026tag=1779864290"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-router@sha256%3A353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-router\u0026tag=1779864042"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-helm-operator@sha256%3Aa069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-helm-operator\u0026tag=1779864254"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-operator-sdk-rhel8@sha256%3Acf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-operator-sdk-rhel8\u0026tag=1779889705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-kubernetes-nmstate-handler-rhel8@sha256%3A51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8\u0026tag=1779863984"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
                  "product_id": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/kubernetes-nmstate-rhel8-operator@sha256%3A8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator\u0026tag=1779863978"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-container-rhel8@sha256%3A4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8\u0026tag=1779865273"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-rhel8-operator@sha256%3A1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator\u0026tag=1779889633"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-csi-driver-shared-resource-mustgather-rhel8@sha256%3Ac42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8\u0026tag=1778765667"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel8@sha256%3Aee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8\u0026tag=1779864468"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel8-operator@sha256%3A31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator\u0026tag=1779889608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
                  "product_id": "registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/metallb-rhel8@sha256%3A518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel8\u0026tag=1779863422"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
                  "product_id": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/metallb-rhel8-operator@sha256%3Aea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel8-operator\u0026tag=1779889640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ptp-operator@sha256%3A769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-operator\u0026tag=1779889587"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
                  "product_id": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ptp-must-gather-rhel8@sha256%3A02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ptp-must-gather-rhel8\u0026tag=1778765673"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64",
                  "product_id": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/sriov-cni-rhel9@sha256%3Aa38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/sriov-cni-rhel9\u0026tag=1779890779"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-dp-admission-controller@sha256%3Af7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-dp-admission-controller\u0026tag=1779864006"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-config-daemon@sha256%3A40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-config-daemon\u0026tag=1779889638"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-device-plugin@sha256%3A2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-device-plugin\u0026tag=1779864038"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-operator@sha256%3Ae33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-operator\u0026tag=1779889606"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-webhook@sha256%3A8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-webhook\u0026tag=1779864381"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel8@sha256%3Af4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8\u0026tag=1779889652"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel8-operator@sha256%3Af4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator\u0026tag=1779889599"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T15:15:45+00:00",
          "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21692"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-35469",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-13T03:52:35+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457729"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457729",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
        }
      ],
      "release_date": "2026-04-13T23:59:59+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T15:15:45+00:00",
          "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21692"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:1d98e37af9119927c9109ce0bcfc0846dc5097724475cd238a84279f10a89e11_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:8cf39a560a5634556cb90a0aac757f0b8e9c4659f3a40530499b83d7f12a2c1a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ea401236f9095016e8bafd19b66822159a863651025f1c4eeb19c51c9307d141_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:518a0fc8a9512e25d2efc450bca820d027b9c24c5179860f3306c5aa64e482a2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:11cfc983202c44d7aae4374a7e943a0a3885332b992cad4489364daf0b7f2ff2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:4a8381572ac578a7aa5c84d1bc302a13b86d17c4fbfa2c8a4e6c11b0bf18a77a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:1570690ed85daf96be33f6345e9d78bb72f1fa4afbea33a7f7948f875d075e32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e21dcb28b67252df45c0bff4d180a3c03a811516135d739552b8662fd76bdd62_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:973e4d63c0e42ca3160f5f45478ab2361043936a7d98b861da54710fdc779dd9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5b6203e148957e6d4a4cc996e3ff3fbf72e49d42dbbdb9f293807babf0601f6e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f08eed07c14665bfbf05ff3eb7a11007a03245a4623340c2b89a6df6db1998c6_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:85bb15771b64a83ece8a69a93ad039d03cdb7bc35e7d45ad927b9a34441fdaf9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c42a1e0af139d161af0f545e79ac8bd09c45de3bcf97675d5be294ccde5c265f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:5a457bdccd7a019189ee0f4500615daf2a38b9265b62b06386dbcab21e40142b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:53e5e8ba9cffb0b888445a1e44e1ae076efc58e2bd51166abf881f7e09d9ddc5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:353d073f4e0ae23c914bafcfabbf66b78b9c86fce092602d8d1eef1e8e584209_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:31247d24fee7047d82a8e98348fff86ff1b22f6e1378687ab3408bab065cce0a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:ee5ef59b6199d31330436a1d1cb317da5ffc16219d6b7637f0b7cfc9b94e2848_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:a069eef4c23f6ca775ad74ca76bd34fc67ab01bafadd92bff94942cc7faadca4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:51eff0c396973b30abbb9e3963b621592130f764326c18cbd6e3c029b42d2b01_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:2aa837ae787dcc8b4d9cc7d1f572b5a07f58e2026c10a7d85adebcc27deea240_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:ca376f567a41c90a23a09a92bfa6685dc42e9b195e37fa4c822b593a26f93f2e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:74578bdac61ddd2c10fe95f2cb306cd004dcebbc0d1c16be653810cb011b807e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:dfd119bd7e1078beb2e9f777cb3740bc2098886a98a4ce9f45730850199ec2fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:cf858b4efe51671c626bcaab7ccbdd0617b7a18c55082c63bf2d76da1790736d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:769e9c9e2ac6e98c26a4b99eff00fc01a3dd6b0b936d977c2a3d37be33e0f015_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:514c754827b0d5c500f480765b3f6dd9a4f92f7b15d68c5a65b7cd4115eb4c73_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:f7b6b4912ee70d93bfa6719c423c5c60047a388bb8f119bb99897ce35b64a06d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:01f077da9d7dfe134f9a4551582221512521600d753f4e07cff772d77e81bd4f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:40a90e313ae3a865320b981979e3785b81e6b18cfd0775e4adb74e50672ef624_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:2c7695b2ea4796259e63d0d4072adc5477861165d8f00decc43272fcd9a1778d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:e33b0048cc8a335767b14ce7d2f5cdc6e65e268dcaea2602f7017d3d8905909b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:8954288ae27649364b7f16db48a65effffa32979425b3353cb4d1ea94dc1111c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:f4c901bd53448622f183ffba1afc3cb4027ecc2442cc19f828843f78e22b780e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:f4487a8a1167b9efb5ecc5ec8223bb09b9feb3af90c635b2a6060a9fcc7f22b9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:02457089cfe6441f56663caa439ac01717ee6da974214cfa47de413ecfc949fb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:a38915f96ccbf46c341b7e22da4bc3763bc18e7733e4039ba8b3b7bc5c8cf63c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
    }
  ]
}

CVE-2026-33186 (GCVE-0-2026-33186)

Vulnerability from cvelistv5 – Published: 2026-03-20 22:23 – Updated: 2026-03-24 18:09

Title

gRPC-Go has an authorization bypass via missing leading slash in :path

Summary

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-285 - Improper Authorization

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.79.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33186",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-24T18:08:38.989284Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-24T18:09:13.422Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.79.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285: Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-20T22:23:32.147Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "source": {
        "advisory": "GHSA-p77j-4mvh-x3m3",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go has an authorization bypass via missing leading slash in :path"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-33186",
    "datePublished": "2026-03-20T22:23:32.147Z",
    "dateReserved": "2026-03-17T22:16:36.720Z",
    "dateUpdated": "2026-03-24T18:09:13.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35469 (GCVE-0-2026-35469)

Vulnerability from cvelistv5 – Published: 2026-04-16 21:19 – Updated: 2026-04-17 12:37

Title

SpdyStream: DOS on CRI

Summary

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/moby/spdystream/security/advis…	x_refsource_CONFIRM
https://github.com/moby/spdystream/releases/tag/v0.5.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
moby	spdystream	Affected: < 0.5.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-17T12:37:18.505269Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-17T12:37:27.329Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "spdystream",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.5.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes \u2014 all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-16T21:19:23.516Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2"
        },
        {
          "name": "https://github.com/moby/spdystream/releases/tag/v0.5.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/moby/spdystream/releases/tag/v0.5.1"
        }
      ],
      "source": {
        "advisory": "GHSA-pc3f-x583-g7j2",
        "discovery": "UNKNOWN"
      },
      "title": "SpdyStream: DOS on CRI"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-35469",
    "datePublished": "2026-04-16T21:19:23.516Z",
    "dateReserved": "2026-04-02T20:49:44.452Z",
    "dateUpdated": "2026-04-17T12:37:27.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:21692

CVE-2026-33186 (GCVE-0-2026-33186)

CVE-2026-35469 (GCVE-0-2026-35469)

Tags

Sightings

Nomenclature