RHSA-2026:24833

Vulnerability from csaf_redhat - Published: 2026-06-09 13:57 - Updated: 2026-09-09 22:48
Summary
Red Hat Security Advisory: Red Hat Quay 3.17.3
Severity
Important
Notes
Topic: Red Hat Quay 3.17.3 is now available with bug fixes.
Details: Quay 3.17.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-32590

A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.

7.1 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-502 - Deserialization of Untrusted Data
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64 —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x —
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le —
Threats
Impact Moderate
CVE-2026-32591

A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.

5.2 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 4 products, the same list as for CVE-2026-32590
Known not affected 27 products, the same list as for CVE-2026-32590
Threats
Impact Important
References
Acknowledgments
Antony Di Scala Michael Whale
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.17.3 is now available with bug fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.17.3",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:24833",
        "url": "https://access.redhat.com/errata/RHSA-2026:24833"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32590",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24833.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.17.3",
    "tracking": {
      "current_release_date": "2026-09-09T22:48:43+00:00",
      "generator": {
        "date": "2026-09-09T22:48:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.18"
        }
      },
      "id": "RHSA-2026:24833",
      "initial_release_date": "2026-06-09T13:57:35+00:00",
      "revision_history": [
        {
          "date": "2026-06-09T13:57:35+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-09T22:48:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.17",
                "product": {
                  "name": "Red Hat Quay 3.17",
                  "product_id": "Red Hat Quay 3.17",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.17::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Ac7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1780949679"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Ae9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Acb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1780949772"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Ae45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3A9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1780949884"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Aee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ae95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Ac04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3Aa86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3A9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3Ac87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Afe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3A679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3Ade281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Antony Di Scala",
            "Michael Whale"
          ]
        }
      ],
      "cve": "CVE-2026-32590",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-03-12T14:43:11.443000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446964"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mirror-registry: remote code execution using pickle deserialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation requires valid login credentials. The attacker must be authenticated to the registry, either through the web interface or through a container tool such as Podman.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446964",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32590",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32590"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590"
        }
      ],
      "release_date": "2026-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-09T13:57:35+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mirror-registry: remote code execution using pickle deserialization"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Antony Di Scala",
            "Michael Whale"
          ]
        }
      ],
      "cve": "CVE-2026-32591",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-03-12T15:09:38.210000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446965"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446965",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
        }
      ],
      "release_date": "2026-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-09T13:57:35+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.