RHSA-2026:5952

Vulnerability from csaf_redhat - Published: 2026-03-26 15:03 - Updated: 2026-04-03 08:05
Summary
Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.3
Severity
Important
Notes
Topic: Red Hat OpenShift Service Mesh 3.2.3 This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Service Mesh 3.2.3, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application. Fixes/Improvements: * Updated to Istio version 1.27.8 * Multiple InferencePools on same Gateway - ext_proc lost for all but first (OSSM-12585) Security Fix(es): * istio-rhel9-operator: Unexpected session resumption in crypto/tls (CVE-2025-68121) * istio-cni-rhel9: Unexpected session resumption in crypto/tls (CVE-2025-68121) * istio-pilot-rhel9: Unexpected session resumption in crypto/tls (CVE-2025-68121) * istio-proxyv2-rhel9: Unexpected session resumption in crypto/tls (CVE-2025-68121) * istio-rhel9-operator: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732) * istio-cni-rhel9: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732) * istio-pilot-rhel9: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732) * istio-proxyv2-rhel9: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732) * istio-rhel9-operator: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731) * istio-cni-rhel9: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731) * istio-pilot-rhel9: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731) * istio-proxyv2-rhel9: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731) * istio-rhel9-operator: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * istio-cni-rhel9: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * istio-pilot-rhel9: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * istio-proxyv2-rhel9: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * istio-rhel9-operator: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * istio-cni-rhel9: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * istio-pilot-rhel9: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * istio-proxyv2-rhel9: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * istio-pilot-rhel9: JWKS Resolver Failure May Expose Hardcoded Default Keys (CVE-2026-31837) * istio-proxyv2-rhel9: JWKS Resolver Failure May Expose Hardcoded Default Keys (CVE-2026-31837)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2025-61726

A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Vendor Fix See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2 https://access.redhat.com/errata/RHSA-2026:5952
Workaround Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
CVE-2025-61728

A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Vendor Fix See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2 https://access.redhat.com/errata/RHSA-2026:5952
Workaround To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.
CVE-2025-61731

A flaw was found in cmd/go. An attacker can exploit this by building a malicious Go source file that uses the '#cgo pkg-config:' directive. This allows the attacker to write to an arbitrary file with partial control over its content, by providing a '--log-file' argument to the pkg-config command. This vulnerability can lead to arbitrary file write.

8.6 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Vendor Fix See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2 https://access.redhat.com/errata/RHSA-2026:5952
Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVE-2025-61732

A flaw was found in Go's 'cgo tool'. This vulnerability arises from a discrepancy in how Go and C/C++ comments are parsed, which allows for malicious code to be hidden within comments and then "smuggled" into the compiled `cgo` binary. An attacker could exploit this to embed and execute arbitrary code, potentially leading to significant system compromise.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Vendor Fix See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2 https://access.redhat.com/errata/RHSA-2026:5952
CVE-2025-68121

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Vendor Fix See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2 https://access.redhat.com/errata/RHSA-2026:5952
CVE-2026-31837

A flaw was found in Istio. A user of Istio could be impacted if the JSON Web Key Set (JWKS) resolver becomes unavailable or fails to fetch keys. This vulnerability can lead to the exposure of hardcoded default settings, potentially bypassing authentication mechanisms and allowing unauthorized access.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-1392 - Use of Default Credentials
Vendor Fix See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2 https://access.redhat.com/errata/RHSA-2026:5952
References
https://access.redhat.com/errata/RHSA-2026:5952 self
https://access.redhat.com/security/cve/CVE-2025-61726 external
https://access.redhat.com/security/cve/CVE-2025-61728 external
https://access.redhat.com/security/cve/CVE-2025-61731 external
https://access.redhat.com/security/cve/CVE-2025-61732 external
https://access.redhat.com/security/cve/CVE-2025-68121 external
https://access.redhat.com/security/cve/CVE-2026-31837 external
https://access.redhat.com/security/cve/cve-2025-61726 external
https://access.redhat.com/security/cve/cve-2025-61728 external
https://access.redhat.com/security/cve/cve-2025-61731 external
https://access.redhat.com/security/cve/cve-2025-61732 external
https://access.redhat.com/security/cve/cve-2025-68121 external
https://access.redhat.com/security/cve/cve-2026-31837 external
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2025-61726 self
https://bugzilla.redhat.com/show_bug.cgi?id=2434432 external
https://www.cve.org/CVERecord?id=CVE-2025-61726 external
https://nvd.nist.gov/vuln/detail/CVE-2025-61726 external
https://go.dev/cl/736712 external
https://go.dev/issue/77101 external
https://groups.google.com/g/golang-announce/c/Vd2… external
https://pkg.go.dev/vuln/GO-2026-4341 external
https://access.redhat.com/security/cve/CVE-2025-61728 self
https://bugzilla.redhat.com/show_bug.cgi?id=2434431 external
https://www.cve.org/CVERecord?id=CVE-2025-61728 external
https://nvd.nist.gov/vuln/detail/CVE-2025-61728 external
https://go.dev/cl/736713 external
https://go.dev/issue/77102 external
https://pkg.go.dev/vuln/GO-2026-4342 external
https://access.redhat.com/security/cve/CVE-2025-61731 self
https://bugzilla.redhat.com/show_bug.cgi?id=2434433 external
https://www.cve.org/CVERecord?id=CVE-2025-61731 external
https://nvd.nist.gov/vuln/detail/CVE-2025-61731 external
https://go.dev/cl/736711 external
https://go.dev/issue/77100 external
https://pkg.go.dev/vuln/GO-2026-4339 external
https://access.redhat.com/security/cve/CVE-2025-61732 self
https://bugzilla.redhat.com/show_bug.cgi?id=2437016 external
https://www.cve.org/CVERecord?id=CVE-2025-61732 external
https://nvd.nist.gov/vuln/detail/CVE-2025-61732 external
https://go.dev/cl/734220 external
https://go.dev/issue/76697 external
https://groups.google.com/g/golang-announce/c/K09… external
https://pkg.go.dev/vuln/GO-2026-4433 external
https://access.redhat.com/security/cve/CVE-2025-68121 self
https://bugzilla.redhat.com/show_bug.cgi?id=2437111 external
https://www.cve.org/CVERecord?id=CVE-2025-68121 external
https://nvd.nist.gov/vuln/detail/CVE-2025-68121 external
https://go.dev/cl/737700 external
https://go.dev/issue/77217 external
https://pkg.go.dev/vuln/GO-2026-4337 external
https://access.redhat.com/security/cve/CVE-2026-31837 self
https://bugzilla.redhat.com/show_bug.cgi?id=2446344 external
https://www.cve.org/CVERecord?id=CVE-2026-31837 external
https://nvd.nist.gov/vuln/detail/CVE-2026-31837 external
https://github.com/istio/istio/security/advisorie… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Service Mesh 3.2.3\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Service Mesh 3.2.3, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nFixes/Improvements:\n\n* Updated to Istio version 1.27.8\n\n* Multiple InferencePools on same Gateway - ext_proc lost for all but first (OSSM-12585)\n\nSecurity Fix(es):\n\n* istio-rhel9-operator: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n\n* istio-cni-rhel9: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n\n* istio-pilot-rhel9: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n\n* istio-proxyv2-rhel9: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n\n* istio-rhel9-operator: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)\n\n* istio-cni-rhel9: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)\n\n* istio-pilot-rhel9: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)\n\n* istio-proxyv2-rhel9: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)\n\n* istio-rhel9-operator: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)\n\n* istio-cni-rhel9: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)\n\n* istio-pilot-rhel9: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)\n\n* istio-proxyv2-rhel9: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)\n\n* istio-rhel9-operator: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)\n\n* istio-cni-rhel9: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)\n\n* istio-pilot-rhel9: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)\n\n* istio-proxyv2-rhel9: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)\n\n* istio-rhel9-operator: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* istio-cni-rhel9: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* istio-pilot-rhel9: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* istio-proxyv2-rhel9: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* istio-pilot-rhel9: JWKS Resolver Failure May Expose Hardcoded Default Keys (CVE-2026-31837)\n\n* istio-proxyv2-rhel9: JWKS Resolver Failure May Expose Hardcoded Default Keys (CVE-2026-31837)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:5952",
        "url": "https://access.redhat.com/errata/RHSA-2026:5952"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61726"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61728"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61731",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61731"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61732",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61732"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
        "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-31837",
        "url": "https://access.redhat.com/security/cve/CVE-2026-31837"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/cve-2025-61726",
        "url": "https://access.redhat.com/security/cve/cve-2025-61726"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/cve-2025-61728",
        "url": "https://access.redhat.com/security/cve/cve-2025-61728"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/cve-2025-61731",
        "url": "https://access.redhat.com/security/cve/cve-2025-61731"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/cve-2025-61732",
        "url": "https://access.redhat.com/security/cve/cve-2025-61732"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/cve-2025-68121",
        "url": "https://access.redhat.com/security/cve/cve-2025-68121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/cve-2026-31837",
        "url": "https://access.redhat.com/security/cve/cve-2026-31837"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification",
        "url": "https://access.redhat.com/security/updates/classification"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5952.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.3",
    "tracking": {
      "current_release_date": "2026-04-03T08:05:53+00:00",
      "generator": {
        "date": "2026-04-03T08:05:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.4"
        }
      },
      "id": "RHSA-2026:5952",
      "initial_release_date": "2026-03-26T15:03:15+00:00",
      "revision_history": [
        {
          "date": "2026-03-26T15:03:15+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-03-26T15:03:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-03T08:05:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Service Mesh 3.2",
                "product": {
                  "name": "Red Hat OpenShift Service Mesh 3.2",
                  "product_id": "Red Hat OpenShift Service Mesh 3.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:service_mesh:3.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Service Mesh"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-sail-operator-bundle@sha256%3A915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774299791"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel9@sha256%3A1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774024187"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-rhel9-operator@sha256%3Adae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774294809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-pilot-rhel9@sha256%3A5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206464"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774114903"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3Ac99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774207172"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel9@sha256%3A90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774024187"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-rhel9-operator@sha256%3A2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774294809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-pilot-rhel9@sha256%3A037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206464"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774114903"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774207172"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel9@sha256%3A4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774024187"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-rhel9-operator@sha256%3Ae1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774294809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ab8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206464"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Aa65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774114903"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774207172"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel9@sha256%3A1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774024187"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-rhel9-operator@sha256%3A6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774294809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-pilot-rhel9@sha256%3Aeba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774206464"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774114903"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
                  "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1774207172"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
          "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-61726",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-01-28T20:01:42.791305+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2434432"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "RHBZ#2434432",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/736712",
          "url": "https://go.dev/cl/736712"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77101",
          "url": "https://go.dev/issue/77101"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
          "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4341",
          "url": "https://pkg.go.dev/vuln/GO-2026-4341"
        }
      ],
      "release_date": "2026-01-28T19:30:31.215000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-26T15:03:15+00:00",
          "details": "See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:5952"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
    },
    {
      "cve": "CVE-2025-61728",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-01-28T20:01:39.965024+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2434431"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61728"
        },
        {
          "category": "external",
          "summary": "RHBZ#2434431",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/736713",
          "url": "https://go.dev/cl/736713"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77102",
          "url": "https://go.dev/issue/77102"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
          "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4342",
          "url": "https://pkg.go.dev/vuln/GO-2026-4342"
        }
      ],
      "release_date": "2026-01-28T19:30:31.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-26T15:03:15+00:00",
          "details": "See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:5952"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
    },
    {
      "cve": "CVE-2025-61731",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-01-28T20:01:45.587773+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2434433"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in cmd/go. An attacker can exploit this by building a malicious Go source file that uses the \u0027#cgo pkg-config:\u0027 directive. This allows the attacker to write to an arbitrary file with partial control over its content, by providing a \u0027--log-file\u0027 argument to the pkg-config command. This vulnerability can lead to arbitrary file write.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is Important rather than Moderate because compiling a malicious Go source file can cause `pkg-config` to create or append data to files at attacker-chosen locations, subject to the permissions of the build user. This can enable unintended filesystem modifications during the build process, which can lead to broken builds, alter tool behavior, and poison caches or artifacts, even without direct code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61731"
        },
        {
          "category": "external",
          "summary": "RHBZ#2434433",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434433"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61731",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61731"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61731",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61731"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/736711",
          "url": "https://go.dev/cl/736711"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77100",
          "url": "https://go.dev/issue/77100"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
          "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4339",
          "url": "https://pkg.go.dev/vuln/GO-2026-4339"
        }
      ],
      "release_date": "2026-01-28T19:30:30.844000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-26T15:03:15+00:00",
          "details": "See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:5952"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive"
    },
    {
      "cve": "CVE-2025-61732",
      "discovery_date": "2026-02-05T05:00:47.678207+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2437016"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s \u0027cgo tool\u0027. This vulnerability arises from a discrepancy in how Go and C/C++ comments are parsed, which allows for malicious code to be hidden within comments and then \"smuggled\" into the compiled `cgo` binary. An attacker could exploit this to embed and execute arbitrary code, potentially leading to significant system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in the `cmd/cgo` component of the Go toolchain. A parsing discrepancy between Go and C/C++ comments could allow for code smuggling into the resulting `cgo` binary. This primarily affects systems where untrusted Go modules utilizing `cgo` are built, impacting Red Hat Enterprise Linux and OpenShift Container Platform.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61732"
        },
        {
          "category": "external",
          "summary": "RHBZ#2437016",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437016"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61732",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61732"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61732",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61732"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/734220",
          "url": "https://go.dev/cl/734220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76697",
          "url": "https://go.dev/issue/76697"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4433",
          "url": "https://pkg.go.dev/vuln/GO-2026-4433"
        }
      ],
      "release_date": "2026-02-05T03:42:26.392000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-26T15:03:15+00:00",
          "details": "See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:5952"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy"
    },
    {
      "cve": "CVE-2025-68121",
      "discovery_date": "2026-02-05T18:01:30.086058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2437111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: Unexpected session resumption in crypto/tls",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "RHBZ#2437111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/737700",
          "url": "https://go.dev/cl/737700"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77217",
          "url": "https://go.dev/issue/77217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4337",
          "url": "https://pkg.go.dev/vuln/GO-2026-4337"
        }
      ],
      "release_date": "2026-02-05T17:48:44.141000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-26T15:03:15+00:00",
          "details": "See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:5952"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/tls: Unexpected session resumption in crypto/tls"
    },
    {
      "cve": "CVE-2026-31837",
      "cwe": {
        "id": "CWE-1392",
        "name": "Use of Default Credentials"
      },
      "discovery_date": "2026-03-10T23:02:58.238399+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Istio. A user of Istio could be impacted if the JSON Web Key Set (JWKS) resolver becomes unavailable or fails to fetch keys. This vulnerability can lead to the exposure of hardcoded default settings, potentially bypassing authentication mechanisms and allowing unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "istio: Istio: Information disclosure and authentication bypass via JWKS resolver unavailability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
          "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-31837"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-31837",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-31837"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31837",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31837"
        },
        {
          "category": "external",
          "summary": "https://github.com/istio/istio/security/advisories/GHSA-v75c-crr9-733c",
          "url": "https://github.com/istio/istio/security/advisories/GHSA-v75c-crr9-733c"
        }
      ],
      "release_date": "2026-03-10T21:57:44.387000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-26T15:03:15+00:00",
          "details": "See Red Hat OpenShift Service Mesh 3.2.3 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
          "product_ids": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:5952"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ece317e94a6b73c5654b836ada2b6ea181c92530b2c8c406c4766499057e8c9_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4a5e31af5fa9740c6567ce5e6510842a989df5a25435521bdeb87a6962bfb3d3_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:90e9ef5b9db44a7f18bcdfaba6851c89138577636cb765de938bdf0e68d296be_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:06e423f764c1714392925c3c3d63b524b9751b7c876e09df11f71c2b860185c1_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:157774fbb36e6924c1b8dbdbace1d97f33070bc4af7e29e999ea182f6fcc87c0_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:1dcb1fad2fa5db4c4c36ad42166b47c86015169bd570cdb6af9fe18717bd93b2_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:226cdb05c3583a75732796acb0fa9afe0771267e9575c0585b0c222141736e0a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:037536592c20bc7a10063a371a845a1805dd2bb59bd04ef65cff985fdb77724f_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:5728f8611c4d586ab1ab080ee3c8038140b2e4ff6f3037263c92b39e7053b30e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b8141f34bc91435d174203b914db8b452c7295d76268b4cd8a18d3cc371eff07_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:eba1f0afeb06ac3eba3c1e35a2045e25e60a37b1a542ef393f7d8d6382030af8_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3f0bff703e601453f75c7eb46da31400a25267bd748aa7337ed9bcc30fc552e6_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:783c436fc96986ab1e5c5869139e3a2d31fe1e1796083c28a743c1900378572e_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9b8c6dc0678602cfb16a347ec26813758267a924f0a4a7189f30b6dd9c2ead91_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a65212d6c07f11e855e60c2027076351947fa2d9a4a725dab519afa796615d3a_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2224fc1667fbac0728e14e7c99c75a28e2e44e76a3e922c26216d5341283b1d3_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6adba5976577e2ae99aad55a8de7a7603e0b9546423af16020d4c34ac125c83f_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dae6eb72e8a8aa989ec2919e763c79273dbd48fc10c10917095276ec0db54e09_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:e1de1bc5f4472757cd9dd1e87de88fc54cdde8bbb9a4fd2245388dc3076efada_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:915c426f6d9e02f951d13df06a3e2398a9cc0cdaae6f4deb71aaaf280ad55421_amd64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:39eeec9d30a317cc703a13389d76e15f641c7d67bec0528fd99a5c8c015c23f9_s390x",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:654d5bcebc86748c735639eb978bcae7cd4e0152eaded93885d04677c8164f1a_arm64",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:888c599cb37535870bf8256831eb81c9a27ec6da5dbd433f4363ff3109195957_ppc64le",
            "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:c99eadf319dd88c8a7e6e2201dd749f1f631a60d1bc0cc683cf83fb14f01317b_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "istio: Istio: Information disclosure and authentication bypass via JWKS resolver unavailability"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.