Vulnerability-Lookup

RHSA-2026:21697

Vulnerability from csaf_redhat - Published: 2026-06-04 15:44 - Updated: 2026-06-05 09:03

Summary

Red Hat Security Advisory: OpenShift Container Platform 4.12.91 security and extras update

Severity

Important

Notes

Topic: Red Hat OpenShift Container Platform release 4.12.91 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.12.91. See the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2026:21696 Security Fix(es): None For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-33186

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64		—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64		—	Vendor Fix fix Workaround

Known not affected 38 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64	—	Workaround

Threats

Impact Important

CVE-2026-35469

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64	—	Workaround

Threats

Impact Important

References

14 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:21697	self
https://access.redhat.com/security/cve/CVE-2026-33186	external
https://access.redhat.com/security/cve/CVE-2026-35469	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33186	self
https://bugzilla.redhat.com/show_bug.cgi?id=2449833	external
https://www.cve.org/CVERecord?id=CVE-2026-33186	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33186	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-35469	self
https://bugzilla.redhat.com/show_bug.cgi?id=2457729	external
https://www.cve.org/CVERecord?id=CVE-2026-35469	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35469	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.12.91 is now available with updates to packages and images that fix several bugs.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.12.\n\nRed Hat Product Security has rated this update as having a security impact of  Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.12.91. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHSA-2026:21696\n\nSecurity Fix(es):\n\nNone\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:21697",
        "url": "https://access.redhat.com/errata/RHSA-2026:21697"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21697.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.12.91 security and extras update",
    "tracking": {
      "current_release_date": "2026-06-05T09:03:07+00:00",
      "generator": {
        "date": "2026-06-05T09:03:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.2"
        }
      },
      "id": "RHSA-2026:21697",
      "initial_release_date": "2026-06-04T15:44:26+00:00",
      "revision_history": [
        {
          "date": "2026-06-04T15:44:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-04T15:44:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T09:03:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.12",
                  "product_id": "Red Hat OpenShift Container Platform 4.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.12::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Container Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                  "product_id": "registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/cloud-event-proxy-rhel8@sha256%3A8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/cloud-event-proxy-rhel8\u0026tag=1779312949"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/cloud-event-proxy-rhel8@sha256%3A8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy\u0026tag=1779312949"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/cloud-event-proxy-rhel8@sha256%3A8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8\u0026tag=1779312949"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cluster-nfd-operator@sha256%3A9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-nfd-operator\u0026tag=1779344465"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel8@sha256%3Aa490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8\u0026tag=1779344463"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel8-operator@sha256%3A5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator\u0026tag=1779344647"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-infiniband-cni@sha256%3A3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-infiniband-cni\u0026tag=1779312890"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ptp@sha256%3A374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp\u0026tag=1779312925"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-diskmaker-rhel9@sha256%3A8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9\u0026tag=1779776719"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-mustgather-rhel9@sha256%3A61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9\u0026tag=1779778273"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-rhel9-operator@sha256%3A72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-rhel9-operator\u0026tag=1779776698"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-node-feature-discovery@sha256%3A2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-node-feature-discovery\u0026tag=1779344482"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ansible-operator@sha256%3Aadab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ansible-operator\u0026tag=1779276573"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cluster-capacity@sha256%3A2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-capacity\u0026tag=1779344454"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-dns-proxy@sha256%3Afa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-dns-proxy\u0026tag=1779276401"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-router@sha256%3A0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-router\u0026tag=1779276594"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-helm-operator@sha256%3A75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-helm-operator\u0026tag=1779276725"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-operator-sdk-rhel8@sha256%3Aee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-operator-sdk-rhel8\u0026tag=1779919814"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-kubernetes-nmstate-handler-rhel8@sha256%3Ac1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8\u0026tag=1779276292"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
                  "product_id": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/kubernetes-nmstate-rhel8-operator@sha256%3A39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator\u0026tag=1779276137"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-container-rhel8@sha256%3Ade1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8\u0026tag=1779277214"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-rhel8-operator@sha256%3A99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator\u0026tag=1779344428"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-contour-rhel8@sha256%3A01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-contour-rhel8\u0026tag=1779344443"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-csi-driver-shared-resource-mustgather-rhel8@sha256%3A1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8\u0026tag=1779345396"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-http-proxy@sha256%3A4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-http-proxy\u0026tag=1779775400"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
                  "product_id": "registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/frr-rhel8@sha256%3Ab4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/frr-rhel8\u0026tag=1779275276"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel8@sha256%3A8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8\u0026tag=1779312924"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel8-operator@sha256%3Aeb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator\u0026tag=1779344450"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
                  "product_id": "registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/metallb-rhel8@sha256%3Adebf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel8\u0026tag=1779275312"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
                  "product_id": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/metallb-rhel8-operator@sha256%3A7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel8-operator\u0026tag=1779344458"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ptp-operator@sha256%3A52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-operator\u0026tag=1779344466"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64",
                  "product_id": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ptp-must-gather-rhel8@sha256%3A2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ptp-must-gather-rhel8\u0026tag=1779345400"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-cni@sha256%3A8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-cni\u0026tag=1779276282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-dp-admission-controller@sha256%3A631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-dp-admission-controller\u0026tag=1779312919"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-config-daemon@sha256%3A2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-config-daemon\u0026tag=1779716480"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-device-plugin@sha256%3Ab64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-device-plugin\u0026tag=1779312925"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-operator@sha256%3A88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-operator\u0026tag=1779716474"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-webhook@sha256%3A34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-webhook\u0026tag=1779716476"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel8@sha256%3A05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8\u0026tag=1779276203"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel8-operator@sha256%3A41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator\u0026tag=1779276136"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T15:44:26+00:00",
          "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21697"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-35469",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-13T03:52:35+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457729"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
          "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457729",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
        }
      ],
      "release_date": "2026-04-13T23:59:59+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T15:44:26+00:00",
          "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21697"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/frr-rhel8@sha256:b4ecc5506da6776313451f66292ada35e8f6970eafc39cf4dd6d98d0162d7ad0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:39bfb0395706d9d1cedd3d5d1f9664de09b40d3299a0631e73ddaecca182c40f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:7ab1b0fe9d4b4193b39fb11eaf488bade57253393aa2edfe63fc2cdc450aa0ea_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/metallb-rhel8@sha256:debf1e11685378d5762f36a40efbbe45f9c56b7f8a20993148a49eeb2fca6416_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ansible-operator@sha256:adab032158a43dca19f90adda7096353b81d2de07200ebd4f01859aa6c8134c0_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:de1df6a5b08ebba8ed793e86feaa375c9910ac3737952de89319beb95c01715c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:99a74f130d277ca6caac8deac7e849ef7843a22eed6ff8dfaa02b02cd0dd0df4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:8107b2141f076725fb04bffc2eb49f547734da8a170f82e2e7537797bdcce1ad_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:2a8765c40de1ee4aacf3b23b5f869bd4d8d268619963fd71c55d9de22f9f55d9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:9a3b25466712852158dae49ad01892858232deb5fec0737b165fca0081db311f_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:5a44088f77c782105e5bc52b0fc8905d8ae5710ccb6ed2380c125699f69e6024_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a490b4dad34d94814fb35d9ef30a7da9d786092a458af7f757cbd4adc7fd0253_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-contour-rhel8@sha256:01a324c06f74969299d37ac5d41f08fcc2821abb2789e56f71cb84d6a7296e24_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:1f8a8c421401e4b706178005c216ad78a4e4813b33b6a958eac2c62ace1135da_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:fa4352a63f8dc9c59284afca0e56f2931255bb573cb444b985acbf0026842bf5_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:4efa58c1a0c89944e692a790075716354b14f0b48c6b299f5a73ef947a455e13_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-egress-router@sha256:0055867f60033ce653901134252b9425cadc6d5d9b5bb9f91e50f1c9661b2829_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:eb7e26d6838664d694b1d367e17407ef83510f348981806516e08ff471d2f36b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:8d3220c0cacf94e3a6cb96584f84dc217906b897c8ef0fb8450de6a8bcf9bf1a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-helm-operator@sha256:75108586cbd2399cbbb3765babbb6ad90a9bfc96af4d78fda5f40aca57077911_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b6ab629fc17c3ba8cfa1d688769d1a61e78d15c4e2fd2919ed49e905edf50d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8463d40a14583d1f7acd9ff73e31ccdab8ff54f7a2604e099fdbde954682f21c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:61d890c9baf5ca3a7812cd48a1a992f957cb62d192888e19d0e39030db8d52c7_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:72d95303072adce41fba3b2bbcf7aa1c888bdb64dd2d38cbebc36a04cdd8c7f4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:2f5b14f2f41d533f444d4017123d4ed46db6e7b70fcebfd2c8443a1f1c593515_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:ee1c2aaa6384f63e9299cc634df8eae99f0a5f46346ca343391018d315cce232_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp-operator@sha256:52fa48425c2b972c7bf9969ac79f4a3d298ee45638d7236ca1e19863516044d3_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-ptp@sha256:374b7b13791fa76cb0d6ac9ffea2528ed5923667c59d91aeb889c6843fd373f9_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-cni@sha256:8591b82656031d59642cd5e8149509a43c42ce2b999bbe4aae6672972e3f1e1b_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:631a4fe37e554f428cb6d20c96faa4259e542c8d4993b3e2836e6297724da12a_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:3dd75746f54f15ce244176cd8594dc793bfcb25161d16515df238f2e9b3e51fc_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:2a03ad6a571f8743a61e5340e8488ac5008c574d2477ebf8129739b098c5b1b6_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:b64023a8dc381898d523f72312c5b210e069fbe33fc46e3def1b75ba9e56033c_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:88e3bfec8ba103e92bc7a301db0b9d608d92d7e6d2e52505a04dff4bd56339c4_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:34308a5a467ef6d7085e659d1af175773b84cca59a3386a6487144d2359da035_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:41418ed3a9b3928c6b6b5e0ac292f5b24413e2c3ab4581cb489eff9c957c339d_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:05f78d3cb075b7b5c08471b15fb121103871a6dd4ade7c074c4f7957d372c145_amd64",
            "Red Hat OpenShift Container Platform 4.12:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:2eb47157706b5c39352b0ac10162320cafbb9b82021ecd2f86ad74d7d16e50cc_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
    }
  ]
}

CVE-2026-33186 (GCVE-0-2026-33186)

Vulnerability from cvelistv5 – Published: 2026-03-20 22:23 – Updated: 2026-03-24 18:09

Title

gRPC-Go has an authorization bypass via missing leading slash in :path

Summary

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-285 - Improper Authorization

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.79.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33186",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-24T18:08:38.989284Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-24T18:09:13.422Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.79.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285: Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-20T22:23:32.147Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "source": {
        "advisory": "GHSA-p77j-4mvh-x3m3",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go has an authorization bypass via missing leading slash in :path"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-33186",
    "datePublished": "2026-03-20T22:23:32.147Z",
    "dateReserved": "2026-03-17T22:16:36.720Z",
    "dateUpdated": "2026-03-24T18:09:13.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35469 (GCVE-0-2026-35469)

Vulnerability from cvelistv5 – Published: 2026-04-16 21:19 – Updated: 2026-04-17 12:37

Title

SpdyStream: DOS on CRI

Summary

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/moby/spdystream/security/advis…	x_refsource_CONFIRM
https://github.com/moby/spdystream/releases/tag/v0.5.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
moby	spdystream	Affected: < 0.5.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-17T12:37:18.505269Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-17T12:37:27.329Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "spdystream",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.5.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes \u2014 all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-16T21:19:23.516Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2"
        },
        {
          "name": "https://github.com/moby/spdystream/releases/tag/v0.5.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/moby/spdystream/releases/tag/v0.5.1"
        }
      ],
      "source": {
        "advisory": "GHSA-pc3f-x583-g7j2",
        "discovery": "UNKNOWN"
      },
      "title": "SpdyStream: DOS on CRI"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-35469",
    "datePublished": "2026-04-16T21:19:23.516Z",
    "dateReserved": "2026-04-02T20:49:44.452Z",
    "dateUpdated": "2026-04-17T12:37:27.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:21697

CVE-2026-33186 (GCVE-0-2026-33186)

CVE-2026-35469 (GCVE-0-2026-35469)

Tags

Sightings

Nomenclature