Vulnerability-Lookup

RHSA-2026:65514

Vulnerability from csaf_redhat - Published: 2026-09-08 15:04 - Updated: 2026-09-10 17:18

Summary

Red Hat Security Advisory: Red Hat Quay 3.9.26

Severity

Important

Notes

Topic: Red Hat Quay 3.9.26 is now available with bug fixes.

Details: Quay 3.9.26

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-15792

A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-16221

A flaw was found in fast-uri. This vulnerability arises because fast-uri does not correctly interpret backslash characters as authority delimiters in Uniform Resource Locators (URLs), unlike Node.js's native WHATWG URL parser. This discrepancy can cause applications that use fast-uri for security policy enforcement, such as allowlists or Server-Side Request Forgery (SSRF) filtering, to misidentify the intended host. Consequently, an attacker could bypass these security policies, potentially redirecting traffic to unintended internal or sensitive network destinations.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-18255

A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-863 - Incorrect Authorization

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-32283

A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-764 - Multiple Locks of a Critical Resource

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-44705

A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-49477

A flaw was found in soupsieve, a CSS selector library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted, untrusted CSS selector strings. The flaw occurs due to a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value, leading to CPU exhaustion.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-67213

A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application's calling thread.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-67214

A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-839 - Numeric Range Comparison Without Minimum Check

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-67313

A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a denial of service (DoS) through request failure or process termination in affected applications.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-674 - Uncontrolled Recursion

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-67314

A flaw was found in axios. This vulnerability involves prototype pollution read-side gadgets within the basic authentication subfield handling. If an application is already susceptible to a separate prototype pollution issue and makes an axios request without specifying username or password in its authentication object, an attacker can inject malicious values. This allows for outbound request tampering, enabling the attacker to inject or replace basic authentication credentials in outgoing requests. Under specific application conditions, this could also lead to credential disclosure.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-67320

A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If successfully exploited, an attacker can route affected plaintext HTTP requests through a malicious proxy, potentially observing sensitive data such as authentication headers and request bodies, and even returning their own responses.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-67321

A flaw was found in axios. A remote attacker could exploit an incomplete depth-limit bypass when the component serializes objects with specific top-level keys. By manipulating object keys and nested values during form or parameter serialization, an attacker can trigger a processing error. This can lead to a denial of service, making the affected request path unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix

Known not affected 19 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le		—
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64		—

Threats

Impact Important

CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-69153

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the 'from' parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application's source code.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-73086

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-1241 - Use of Predictable Algorithm in Random Number Generator

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-73088

A flaw was found in Browserslist, a tool for sharing browser and Node.js versions. An attacker could provide specially crafted statistics data, which the tool processes without proper validation. This improper handling of untrusted data can lead to prototype pollution, potentially causing the application to crash and resulting in a denial of service.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

CVE-2026-73089

A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x	—	Vendor Fix fix Workaround

Known not affected 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64	—	Workaround

Threats

Impact Important

References

190 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:65514	self
https://access.redhat.com/security/cve/CVE-2026-15792	external
https://access.redhat.com/security/cve/CVE-2026-16221	external
https://access.redhat.com/security/cve/CVE-2026-18255	external
https://access.redhat.com/security/cve/CVE-2026-32283	external
https://access.redhat.com/security/cve/CVE-2026-33818	external
https://access.redhat.com/security/cve/CVE-2026-44705	external
https://access.redhat.com/security/cve/CVE-2026-49477	external
https://access.redhat.com/security/cve/CVE-2026-56852	external
https://access.redhat.com/security/cve/CVE-2026-56853	external
https://access.redhat.com/security/cve/CVE-2026-56858	external
https://access.redhat.com/security/cve/CVE-2026-56859	external
https://access.redhat.com/security/cve/CVE-2026-56860	external
https://access.redhat.com/security/cve/CVE-2026-56862	external
https://access.redhat.com/security/cve/CVE-2026-67213	external
https://access.redhat.com/security/cve/CVE-2026-67214	external
https://access.redhat.com/security/cve/CVE-2026-67313	external
https://access.redhat.com/security/cve/CVE-2026-67314	external
https://access.redhat.com/security/cve/CVE-2026-67320	external
https://access.redhat.com/security/cve/CVE-2026-67321	external
https://access.redhat.com/security/cve/CVE-2026-69152	external
https://access.redhat.com/security/cve/CVE-2026-69153	external
https://access.redhat.com/security/cve/CVE-2026-73086	external
https://access.redhat.com/security/cve/CVE-2026-73088	external
https://access.redhat.com/security/cve/CVE-2026-73089	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-15792	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503746	external
https://www.cve.org/CVERecord?id=CVE-2026-15792	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15792	external
https://github.com/moby/buildkit/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-16221	self
https://bugzilla.redhat.com/show_bug.cgi?id=2502307	external
https://www.cve.org/CVERecord?id=CVE-2026-16221	external
https://nvd.nist.gov/vuln/detail/CVE-2026-16221	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-18255	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508454	external
https://www.cve.org/CVERecord?id=CVE-2026-18255	external
https://nvd.nist.gov/vuln/detail/CVE-2026-18255	external
https://access.redhat.com/security/cve/CVE-2026-32283	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456338	external
https://www.cve.org/CVERecord?id=CVE-2026-32283	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32283	external
https://go.dev/cl/763767	external
https://go.dev/issue/78334	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4870	external
https://access.redhat.com/security/cve/CVE-2026-33818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://www.cve.org/CVERecord?id=CVE-2026-33818	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818	external
https://go.dev/cl/814980	external
https://go.dev/issue/80405	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-5972	external
https://access.redhat.com/security/cve/CVE-2026-44705	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487946	external
https://www.cve.org/CVERecord?id=CVE-2026-44705	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44705	external
https://github.com/raszi/node-tmp/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-49477	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500752	external
https://www.cve.org/CVERecord?id=CVE-2026-49477	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49477	external
https://github.com/facelessuser/soupsieve/commit/…	external
https://github.com/facelessuser/soupsieve/release…	external
https://github.com/facelessuser/soupsieve/securit…	external
https://access.redhat.com/security/cve/CVE-2026-56852	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233	external
https://www.cve.org/CVERecord?id=CVE-2026-56852	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852	external
https://go.dev/cl/794100	external
https://go.dev/issue/80142	external
https://pkg.go.dev/vuln/GO-2026-5970	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-67213	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508406	external
https://www.cve.org/CVERecord?id=CVE-2026-67213	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67213	external
https://github.com/ai/nanoid/commit/cb3626d0f3342…	external
https://github.com/ai/nanoid/releases/tag/5.1.6	external
https://www.vulncheck.com/advisories/nanoid-befor…	external
https://access.redhat.com/security/cve/CVE-2026-67214	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508411	external
https://www.cve.org/CVERecord?id=CVE-2026-67214	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67214	external
https://github.com/ai/nanoid/commit/6ccc67bbaba71…	external
https://github.com/ai/nanoid/releases/tag/5.1.16	external
https://www.vulncheck.com/advisories/nanoid-befor…	external
https://access.redhat.com/security/cve/CVE-2026-67313	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510017	external
https://www.cve.org/CVERecord?id=CVE-2026-67313	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67313	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-67314	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510030	external
https://www.cve.org/CVERecord?id=CVE-2026-67314	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67314	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-67320	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509993	external
https://www.cve.org/CVERecord?id=CVE-2026-67320	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67320	external
https://github.com/axios/axios/commit/df53d7dd99b…	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-67321	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510011	external
https://www.cve.org/CVERecord?id=CVE-2026-67321	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67321	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-69152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722	external
https://www.cve.org/CVERecord?id=CVE-2026-69152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-69153	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510719	external
https://www.cve.org/CVERecord?id=CVE-2026-69153	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69153	external
https://github.com/postcss/postcss/commit/7beca13…	external
https://github.com/postcss/postcss/releases/tag/8.5.19	external
https://github.com/postcss/postcss/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-73086	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514175	external
https://www.cve.org/CVERecord?id=CVE-2026-73086	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73086	external
https://github.com/ai/nanoid/commit/7087969281cab…	external
https://github.com/ai/nanoid/commit/821dfed7b5db7…	external
https://github.com/ai/nanoid/commit/b0036ed60dc9f…	external
https://github.com/ai/nanoid/releases/tag/3.3.12	external
https://github.com/ai/nanoid/releases/tag/5.1.11	external
https://github.com/ai/nanoid/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-73088	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514177	external
https://www.cve.org/CVERecord?id=CVE-2026-73088	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73088	external
https://github.com/browserslist/browserslist/comm…	external
https://github.com/browserslist/browserslist/rele…	external
https://github.com/browserslist/browserslist/secu…	external
https://access.redhat.com/security/cve/CVE-2026-73089	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514195	external
https://www.cve.org/CVERecord?id=CVE-2026-73089	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73089	external
https://github.com/browserslist/browserslist/comm…	external
https://github.com/browserslist/browserslist/secu…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.9.26 is now available with bug fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.9.26",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:65514",
        "url": "https://access.redhat.com/errata/RHSA-2026:65514"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-15792",
        "url": "https://access.redhat.com/security/cve/CVE-2026-15792"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-16221",
        "url": "https://access.redhat.com/security/cve/CVE-2026-16221"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18255",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18255"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44705",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44705"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49477",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49477"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67213",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67213"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67214",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67214"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67313",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67313"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67314",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67314"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67320",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67320"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67321",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67321"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69153",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69153"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73086",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73086"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73088",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73088"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73089",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65514.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.9.26",
    "tracking": {
      "current_release_date": "2026-09-10T17:18:20+00:00",
      "generator": {
        "date": "2026-09-10T17:18:20+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.18"
        }
      },
      "id": "RHSA-2026:65514",
      "initial_release_date": "2026-09-08T15:04:48+00:00",
      "revision_history": [
        {
          "date": "2026-09-08T15:04:48+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-08T15:05:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-10T17:18:20+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.9",
                "product": {
                  "name": "Red Hat Quay 3.9",
                  "product_id": "Red Hat Quay 3.9",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.9::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Abfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1788596098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1788595234"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1788597015"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1788596260"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Acfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1788596727"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Af951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1788595236"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1788595308"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3Adfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1788672362"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1788597635"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1788595574"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1788595234"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Af57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1788596260"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1788595236"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1788595308"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1788597635"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1788595574"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1788595234"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1788596260"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1788595236"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3Ad8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1788595308"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1788597635"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1788595574"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15792",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-07-21T17:01:51.555730+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503746"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "BuildKit is used by several Red Hat products to build container images. This issue allows a malicious BuildKit frontend or client to cause the BuildKit build process to crash. Exploiting this issue requires the ability to supply a build definition (for example, a Dockerfile specifying a custom #syntax frontend) to a BuildKit-based build; it does not allow remote code execution or exposure of data. The issue is fixed upstream in BuildKit version 0.31.2. Red Hat Hardened Images (Buildah, Podman, and Trivy) has already shipped the fixed version. Other affected Red Hat products are being assessed and will ship the fixed version of BuildKit in upcoming releases.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15792"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503746",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503746"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15792",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15792"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6",
          "url": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6"
        }
      ],
      "release_date": "2026-07-21T16:10:21.395000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Avoid building container images using BuildKit frontends from untrusted sources. A BuildKit frontend is typically specified using a \"# syntax\" directive at the top of a Dockerfile, or with the \"--frontend\" option to the \"buildctl build\" command. Only use frontend images that come from a trusted source.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request"
    },
    {
      "cve": "CVE-2026-16221",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-19T15:02:40.167601+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2502307"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. This vulnerability arises because fast-uri does not correctly interpret backslash characters as authority delimiters in Uniform Resource Locators (URLs), unlike Node.js\u0027s native WHATWG URL parser. This discrepancy can cause applications that use fast-uri for security policy enforcement, such as allowlists or Server-Side Request Forgery (SSRF) filtering, to misidentify the intended host. Consequently, an attacker could bypass these security policies, potentially redirecting traffic to unintended internal or sensitive network destinations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in fast-uri allows for a security policy bypass due to inconsistent URL parsing between fast-uri and Node.js\u0027s native WHATWG URL parser. Applications within Red Hat Hardened Images that rely on fast-uri for host-based policy enforcement, such as allowlists or Server-Side Request Forgery (SSRF) filtering, can be misled by specially crafted URLs. This could enable an attacker to redirect traffic to unintended internal or sensitive network destinations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16221"
        },
        {
          "category": "external",
          "summary": "RHBZ#2502307",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502307"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16221",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16221"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16221",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16221"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx"
        }
      ],
      "release_date": "2026-07-19T14:08:32.993000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency"
    },
    {
      "cve": "CVE-2026-18255",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2026-07-21T14:34:20+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508454"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: quay: Global read-only superuser can view robot account tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18255"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508454",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508454"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18255",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18255"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18255",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18255"
        }
      ],
      "release_date": "2026-07-21T14:34:20+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Remove users who can not be trusted with robot account credentials from GLOBAL_READONLY_SUPER_USERS.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "quay: quay: Global read-only superuser can view robot account tokens"
    },
    {
      "cve": "CVE-2026-32283",
      "cwe": {
        "id": "CWE-764",
        "name": "Multiple Locks of a Critical Resource"
      },
      "discovery_date": "2026-04-08T02:01:16.213799+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763767",
          "url": "https://go.dev/cl/763767"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78334",
          "url": "https://go.dev/issue/78334"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4870",
          "url": "https://pkg.go.dev/vuln/GO-2026-4870"
        }
      ],
      "release_date": "2026-04-08T01:06:57.670000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
    },
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-44705",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-06-11T17:01:27.295887+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487946"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Applications that pass user-controlled data to the file or directory creation functions without input sanitization are vulnerable to this issue. This flaw allows files to be created in arbitrary locations with the privileges of the running process. Due to this reason, this vulnerability has been rated with an Important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44705"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487946",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487946"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44705",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44705"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705"
        },
        {
          "category": "external",
          "summary": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65",
          "url": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65"
        }
      ],
      "release_date": "2026-06-11T15:42:46.565000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, validate and sanitize any user-controlled data before it is passed to the prefix, postfix or dir options of the file or directory creation functions, specifically rejecting or stripping input containing path traversal sequences.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape"
    },
    {
      "cve": "CVE-2026-49477",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-07-14T22:04:22.677547+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500752"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in soupsieve, a CSS selector library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted, untrusted CSS selector strings. The flaw occurs due to a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value, leading to CPU exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A regular expression denial of service (ReDoS) flaw in the soupsieve library can lead to CPU exhaustion. A remote attacker can exploit this by supplying a small, specially crafted CSS selector string to applications that process untrusted CSS, potentially blocking worker threads and causing a complete service denial in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49477"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500752",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500752"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49477",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49477"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49477",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49477"
        },
        {
          "category": "external",
          "summary": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3",
          "url": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3"
        },
        {
          "category": "external",
          "summary": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4",
          "url": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37",
          "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37"
        }
      ],
      "release_date": "2026-07-14T20:51:29.369000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-67213",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-29T14:01:09.009518+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508406"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application\u0027s calling thread.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An algorithmic denial of service flaw was found in the `nanoid` library. When calling `customAlphabet` or `customRandom` with a `size` parameter of `0`, the internal generation loop fails to meet its termination condition. In Node.js or browser execution contexts, an attacker who supplies an unvalidated, zero-value size parameter to these functions causes the thread to enter an infinite loop, driving CPU utilization to 100% and completely blocking event loop execution for that thread.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67213"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508406",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508406"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67213",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67213"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7",
          "url": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.1.6",
          "url": "https://github.com/ai/nanoid/releases/tag/5.1.6"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom",
          "url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"
        }
      ],
      "release_date": "2026-07-29T13:32:01.534000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure application code validates the size parameter passed to customAlphabet or customRandom, rejecting or sanitizing zero-value inputs before passing them to nanoid.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation"
    },
    {
      "cve": "CVE-2026-67214",
      "cwe": {
        "id": "CWE-839",
        "name": "Numeric Range Comparison Without Minimum Check"
      },
      "discovery_date": "2026-07-29T14:01:28.637584+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508411"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library\u0027s non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An input validation flaw in Nano ID\u0027s non-secure module (`nanoid/non-secure`) causes an infinite loop in the `customAlphabet` and `nanoid` functions when processed with a negative size parameter. Because the decrementing loop counter never meets its termination condition, an unauthenticated attacker who passes an unvalidated negative integer value can block the NodeJS event loop, resulting in a thread hang and complete Denial of Service (DoS) for the host application.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67214"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508411",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508411"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67214",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67214"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49",
          "url": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.1.16",
          "url": "https://github.com/ai/nanoid/releases/tag/5.1.16"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module",
          "url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"
        }
      ],
      "release_date": "2026-07-29T13:32:02.265000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Sanitize all user-supplied integer inputs before passing them to `nanoid` or `customAlphabet` functions in the `nanoid/non-secure` module, ensuring the size parameter is strictly a non-negative integer.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions"
    },
    {
      "cve": "CVE-2026-67313",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2026-08-01T13:03:08.824485+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510017"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a denial of service (DoS) through request failure or process termination in affected applications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67313"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510017",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510017"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67313"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-42h9-826w-cgv3",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-42h9-826w-cgv3"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-formdatatojson",
          "url": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-formdatatojson"
        }
      ],
      "release_date": "2026-08-01T12:22:16.493000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON"
    },
    {
      "cve": "CVE-2026-67314",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-08-01T13:03:49.884962+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in axios. This vulnerability involves prototype pollution read-side gadgets within the basic authentication subfield handling. If an application is already susceptible to a separate prototype pollution issue and makes an axios request without specifying username or password in its authentication object, an attacker can inject malicious values. This allows for outbound request tampering, enabling the attacker to inject or replace basic authentication credentials in outgoing requests. Under specific application conditions, this could also lead to credential disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67314"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67314",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67314"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67314",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67314"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-auth-subfields",
          "url": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-auth-subfields"
        }
      ],
      "release_date": "2026-08-01T12:22:16.603000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth"
    },
    {
      "cve": "CVE-2026-67320",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-08-01T13:01:50.659496+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If successfully exploited, an attacker can route affected plaintext HTTP requests through a malicious proxy, potentially observing sensitive data such as authentication headers and request bodies, and even returning their own responses.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67320"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67320",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67320"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67320",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67320"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc",
          "url": "https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter",
          "url": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter"
        }
      ],
      "release_date": "2026-08-01T12:22:17.547000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter"
    },
    {
      "cve": "CVE-2026-67321",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-01T13:02:49.231124+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510011"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in axios. A remote attacker could exploit an incomplete depth-limit bypass when the component serializes objects with specific top-level keys. By manipulating object keys and nested values during form or parameter serialization, an attacker can trigger a processing error. This can lead to a denial of service, making the affected request path unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: axios: Denial of Service via object serialization bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67321"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510011",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510011"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67321",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67321"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67321",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67321"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-maxdepth-bypass",
          "url": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-maxdepth-bypass"
        }
      ],
      "release_date": "2026-08-01T12:22:18.177000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: axios: Denial of Service via object serialization bypass"
    },
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-69153",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-08-03T18:01:01.506065+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510719"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the \u0027from\u0027 parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application\u0027s source code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Moderate because the information disclosed is limited to files with a .map extension. Source map files may contain source code paths and content, but the attacker cannot read arbitrary files on the system. Exploitation requires the application to process attacker-controlled CSS through PostCSS on the server side.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510719",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510719"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69153",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8",
          "url": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/releases/tag/8.5.19",
          "url": "https://github.com/postcss/postcss/releases/tag/8.5.19"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp",
          "url": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"
        }
      ],
      "release_date": "2026-08-03T16:56:25.733000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Pass map: false when invoking PostCSS to disable source map auto-loading. This prevents the path traversal from being triggered, though it removes source map support entirely.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL"
    },
    {
      "cve": "CVE-2026-73086",
      "cwe": {
        "id": "CWE-1241",
        "name": "Use of Predictable Algorithm in Random Number Generator"
      },
      "discovery_date": "2026-08-11T17:11:45.607696+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid: Predictable ID generation due to integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the nanoid JavaScript library allows a remote attacker to cause predictable ID generation by exploiting an integer overflow in the `nanoid(size)` function. This can lead to the compromise of session tokens, CSRF tokens, and API keys, bypassing security mechanisms. The attack requires specific conditions, contributing to its Important severity rather than Critical.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73086"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4",
          "url": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3",
          "url": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac",
          "url": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/3.3.12",
          "url": "https://github.com/ai/nanoid/releases/tag/3.3.12"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.1.11",
          "url": "https://github.com/ai/nanoid/releases/tag/5.1.11"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w",
          "url": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w"
        }
      ],
      "release_date": "2026-08-11T16:46:23.024000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nanoid: nanoid: Predictable ID generation due to integer overflow"
    },
    {
      "cve": "CVE-2026-73088",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-08-11T17:11:53.228719+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a tool for sharing browser and Node.js versions. An attacker could provide specially crafted statistics data, which the tool processes without proper validation. This improper handling of untrusted data can lead to prototype pollution, potentially causing the application to crash and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Prototype pollution leading to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability. The browserslist package, a front-end development tool, is vulnerable to prototype pollution when processing untrusted statistics data. This flaw can lead to a denial of service, as malicious input can crash applications that use the affected library. The impact is considered Important due to the potential for remote exploitation without authentication or user interaction, directly affecting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73088",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73088",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73088"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51",
          "url": "https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g"
        }
      ],
      "release_date": "2026-08-11T17:00:05.869000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, ensure that the `browserslist` tool processes only trusted `browserslist-stats.json`, `opts.stats`, and CLI `--stats` data. Avoid using the tool with untrusted input sources in development or build environments. If `browserslist` is integrated into automated pipelines, validate all input data originates from trusted sources.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Prototype pollution leading to denial of service"
    },
    {
      "cve": "CVE-2026-73089",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-11T17:12:48.012036+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514195"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `browserslist` library, which is used across several Red Hat products and services. The flaw allows an attacker to trigger unbounded memory growth by influencing query values, potentially leading to an out-of-memory crash and service unavailability. This is considered Important due to the potential for remote exploitation and significant impact on service stability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514195",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514195"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73089",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405",
          "url": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx"
        }
      ],
      "release_date": "2026-08-11T17:05:38.760000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-08T15:04:48+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:778ddeecda231c33be1c5b7be4a7ab89ded6c52c2fb1defaea02344e125be586_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:8f8853a82aa13fc780853cb603178bf37cb9ec2ff5fcdb20c991c36248d2d1e5_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:d8c199d1126dfbf14f28f59019aa07186b9ab317eaec068b6baaa9986fc328c2_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:735e8d045b753f0c5692ac6eda7505f411715b7554c04cff1617bbca4bccfbfc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1233e29cded6ff70de2b3241f4367c4dd04a52ea5ed0cc9ea3fa921e87fd621d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4c1c63a4c1b67a5d78ec554a7a5d7887b58bc9f1440d40555838a46e943c9d34_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f57146e3ebfdcb141f29729130c9abe300cb07d826f9ad88fea6482ea64e4245_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:cfad760d853381eab84fb09c58bd867a2f6e8e32d67d183a870dcdec3967007d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:2d50aca337a0ce8273980219e243aa689bbd127d51dd0ce6efc0b72e08168306_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:38d3fcb89a38eaa759c5388ce80ec7653ae4522e1ebc6ccfd59582f7d67677ac_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:f951c12ea99f1e84136874a3f321a0f972bad1ec2944fa9265b25485e1adebf6_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:bfd098013eee11a83299eb9d533458dcf918ae1e3e59cb8c3fcc887784104b9f_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:28d2b08f1fc08046115c88fe9ffd2879f9b2898586038297661e3aa20ec5feca_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:535e4c4c61354de56e5c39c6048674f9e74ad1cca65c4199b135b9f50f25c345_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70264205b43c724ad5ab45e3e88341a463df2a52f6cadd72b226ecac2aa21383_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:dfeb8013b678cdbdbde22380a9e94c0c5a4b535228ca6061fd59495df0e4e3d1_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0c397a0db8ba03e513b09a7de85861ceb217ed6fa85232844541cbae05d4ce2c_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:78474eef20360703105f831266a83e56539cf475761eb0087e700d26d639b9fd_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:8da02a7a888055037d8b46fcbe99ecb11a40dc2aee8c0dd6ad74a4069de20863_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:216b1b129c1a34c0aef941036d01b89f978ed9efe679d6340f763310add54371_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:83040da0106d8351e7c78aef48c0b60891f452373374412503a4339a45ef0a97_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:9cd647ee1283b1ae146291856a1e8bbea85e0309daac2e04eadd506ed70795bc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results"
    }
  ]
}

CVE-2026-15792 (GCVE-0-2026-15792)

Vulnerability from cvelistv5 – Published: 2026-07-21 16:10 – Updated: 2026-07-21 17:01

Title

Possible panic when incorrect parameters sent from frontend

Summary

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 17:01 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

Docker mitre root

References

1 reference

URL	Tags
https://github.com/moby/buildkit/security/advisor…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
moby	BuildKit	Affected: 0 , < 0.31.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15792",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T17:01:19.161414Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T17:01:55.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "MacOS",
            "Windows"
          ],
          "product": "BuildKit",
          "vendor": "moby",
          "versions": [
            {
              "lessThan": "0.31.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic."
            }
          ],
          "value": "A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T16:10:21.395Z",
        "orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e",
        "shortName": "Docker"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Possible panic when incorrect parameters sent from frontend",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the #syntax line on your Dockerfile, or with --frontend flag when using buildctl build command."
            }
          ],
          "value": "Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the #syntax line on your Dockerfile, or with --frontend flag when using buildctl build command."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e",
    "assignerShortName": "Docker",
    "cveId": "CVE-2026-15792",
    "datePublished": "2026-07-21T16:10:21.395Z",
    "dateReserved": "2026-07-14T19:31:00.046Z",
    "dateUpdated": "2026-07-21T17:01:55.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-16221 (GCVE-0-2026-16221)

Vulnerability from cvelistv5 – Published: 2026-07-19 14:08 – Updated: 2026-07-20 13:53

Title

fast-uri vulnerable to host confusion via literal backslash authority delimiter

Summary

Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Node's http and https clients, normalizes the backslash to a forward slash for special schemes such as http, https, ws, wss, ftp, and file. As a result, the two parsers extract different hosts from the same input string. Applications that use fast-uri to enforce host-based policy such as allowlists, denylists, loopback or SSRF filtering, redirect validation, or outbound proxy routing before passing the same URL into Node's URL or fetch consumers can be steered to an unintended destination, including cloud metadata endpoints, loopback, or internal hosts. Patches: upgrade to fast-uri 4.1.1, 3.1.4, or 2.4.3. Workarounds: none.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-20 13:53 UTC

CWE

CWE-436 - Interpretation Conflict

Assigner

openjs redhat root

References

2 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fast-uri	fast-uri	Affected: 2.3.1 , < 2.4.3 (semver) Unaffected: 2.4.3 (semver) Affected: 3.0.0 , < 3.1.4 (semver) Unaffected: 3.1.4 (semver) Affected: 4.0.0 , < 4.1.1 (semver) Unaffected: 4.1.1 (semver)

Credits

rampage0010 mcollina UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16221",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-20T13:53:31.279563Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T13:53:42.583Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "2.4.3",
              "status": "affected",
              "version": "2.3.1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "2.4.3",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.4",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.4",
              "versionType": "semver"
            },
            {
              "lessThan": "4.1.1",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.1.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "rampage0010"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node\u0027s native WHATWG URL parser, used by fetch, undici, and Node\u0027s http and https clients, normalizes the backslash to a forward slash for special schemes such as http, https, ws, wss, ftp, and file. As a result, the two parsers extract different hosts from the same input string. Applications that use fast-uri to enforce host-based policy such as allowlists, denylists, loopback or SSRF filtering, redirect validation, or outbound proxy routing before passing the same URL into Node\u0027s URL or fetch consumers can be steered to an unintended destination, including cloud metadata endpoints, loopback, or internal hosts. \n\nPatches: upgrade to fast-uri 4.1.1, 3.1.4, or 2.4.3.\n\nWorkarounds: none."
            }
          ],
          "value": "Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node\u0027s native WHATWG URL parser, used by fetch, undici, and Node\u0027s http and https clients, normalizes the backslash to a forward slash for special schemes such as http, https, ws, wss, ftp, and file. As a result, the two parsers extract different hosts from the same input string. Applications that use fast-uri to enforce host-based policy such as allowlists, denylists, loopback or SSRF filtering, redirect validation, or outbound proxy routing before passing the same URL into Node\u0027s URL or fetch consumers can be steered to an unintended destination, including cloud metadata endpoints, loopback, or internal hosts. \n\nPatches: upgrade to fast-uri 4.1.1, 3.1.4, or 2.4.3.\n\nWorkarounds: none."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-436",
              "description": "CWE-436: Interpretation Conflict",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-19T14:08:32.993Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to host confusion via literal backslash authority delimiter",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-16221",
    "datePublished": "2026-07-19T14:08:32.993Z",
    "dateReserved": "2026-07-18T11:37:36.004Z",
    "dateUpdated": "2026-07-20T13:53:42.583Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-18255 (GCVE-0-2026-18255)

Vulnerability from cvelistv5 – Published: 2026-07-29 16:34 – Updated: 2026-09-10 21:42

Title

Quay: quay: global read-only superuser can view robot account tokens

Summary

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-29 18:05 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:63307	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65514	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66084	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66523	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-18255	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2508454	issue-trackingx_refsource_REDHAT

Impacted products

5 products

Vendor	Product	Version
Red Hat	Red Hat Quay 3.10	Unaffected: 1788561841 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1788594376 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1788191755 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.9	Unaffected: 1788595574 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3

Date Public

2026-07-21 14:34

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-18255",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-29T18:05:45.459458Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-29T18:05:53.353Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.10::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788561841",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.12::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.12",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788594376",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.15::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788191755",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.9::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788595574",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:quay:3"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel9",
          "product": "Red Hat Quay 3",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-07-21T14:34:20.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-10T21:42:24.322Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:63307",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "name": "RHSA-2026:65514",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:65514"
        },
        {
          "name": "RHSA-2026:66084",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:66084"
        },
        {
          "name": "RHSA-2026:66523",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:66523"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-18255"
        },
        {
          "name": "RHBZ#2508454",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508454"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-21T14:34:20.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T14:34:20.000Z",
          "value": "Made public."
        }
      ],
      "title": "Quay: quay: global read-only superuser can view robot account tokens",
      "workarounds": [
        {
          "lang": "en",
          "value": "Remove users who can not be trusted with robot account credentials from GLOBAL_READONLY_SUPER_USERS."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-863: Incorrect Authorization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-18255",
    "datePublished": "2026-07-29T16:34:44.442Z",
    "dateReserved": "2026-07-29T16:19:25.998Z",
    "dateUpdated": "2026-09-10T21:42:24.322Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32283 (GCVE-0-2026-32283)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-09-10 12:05

Title

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Summary

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-13 17:51 UTC

CWE

CWE-667 - Improper Locking
CWE-764 - Multiple Locks of a Critical Resource

Assigner

Go Google root

References

138 references

URL	Tags
https://go.dev/cl/763767
https://go.dev/issue/78334
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4870
https://access.redhat.com/security/cve/CVE-2026-32283	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2456338	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16101	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27076	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:14391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39810	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34365	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20569	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23103	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19715	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16024	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19550	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18032	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18027	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17084	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19719	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19750	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20570	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22713	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19714	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20571	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19450	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11881	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11863	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17075	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29195	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23102	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19133	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19139	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19137	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19134	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19136	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22937	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19144	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19135	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22450	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24470	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19156	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19132	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29035	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33722	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10704	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16875	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11507	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11514	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48790	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:15980	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19634	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51288	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49944	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16102	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25252	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25251	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47719	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47722	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47721	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25248	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49600	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25250	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34192	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47714	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47716	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34196	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49509	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19721	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20607	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20608	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19722	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16021	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19839	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19720	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22709	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24337	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20609	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:14200	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10219	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11711	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11704	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29455	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19350	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19352	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19351	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23228	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19353	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22714	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26447	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19369	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28074	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26571	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26636	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22423	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22347	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23345	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7385	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7291	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22485	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57409	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57801	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57802	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65343	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:14162	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66084	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65514	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55901	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55898	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55902	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55900	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21769	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT

Impacted products

239 products

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.1.1-7 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.10-6.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.5-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.6.14-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.5-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.5-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.14-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.5-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.25.9-3.el10_1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-25.el10_1 , < * (rpm) Unaffected: 0:10.2.6-26.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.2.3-5.el10_1 , < * (rpm) Unaffected: 0:0.2.7-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:5.3.0-4.el10_1 , < * (rpm) Unaffected: 0:5.3.0-5.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.8-5.el10_1 , < * (rpm) Unaffected: 0:0.4.9-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.1-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.144.0-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.9.27-7.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:165.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 7:5.8.2-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 2:1.22.2-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 2:1.43.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.25.9-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 6:0.8.5-2.el10_0.1 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:5.2.2-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:10.2.6-24.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.9.27-3.el10_0.4 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.2.3-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.6.1-2.el10_0.4 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.144.0-2.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-7.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 2:1.39.9-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 6:5.4.0-15.el10_0.2 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 2:1.18.1-3.el10_0.2 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.25.2-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.4.0-7.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:0.11-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260422204008.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.2.10-30.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:5.1.1-14.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-7.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.4.1-10.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260520103055.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-1.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 8060020260515174849.ad008a3a , < * (rpm) Unaffected: 8060020260803064027.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 8060020260803064027.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 8060020260515174849.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_tus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 8060020260515174849.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_e4s:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.25.9-1.el9_7 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.1.1-14.el9_7 , < * (rpm) Unaffected: 0:5.1.1-15.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-21.el9_7 , < * (rpm) Unaffected: 0:10.2.6-22.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.6.1-8.el9_7.1 , < * (rpm) Unaffected: 0:3.7.1-4.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.144.0-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-6.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 6:5.8.2-3.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.22.2-6.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.43.1-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:1.9.0-3.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 1:1.26.11-1.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 2:4.4.1-22.el9_2.11 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 2:1.11.4-0.1.el9_2.6 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:1.2.0-3.el9_2.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:1.29.7-1.el9_2.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.25.9-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.1.1-5.el9_2.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:9.0.9-12.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:76.1-6.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:0.144.0-2.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 2:1.33.15-1.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 4:4.9.4-20.el9_4.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 2:1.14.6-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.25.9-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:9.2.10-27.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:5.1.1-8.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:101.3-4.el9_4.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-8.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.25.9-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 5:5.4.0-20.el9_6.3 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.144.0-2.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:3.6.1-2.el9_6.4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:5.1.1-14.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:10.2.6-21.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 2:1.39.9-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:1.6.2-3.el9_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 2:1.18.1-5.el9_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:132.2-7.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 6:0.8.5-2.el9_6.2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1:1.4.0-7.rhaos4.15.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:0.2.1-1.1.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:3.3.23-22.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:3.4.26-9.5.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Services on OpenShift 18.0	Unaffected: 0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < * (rpm) cpe:/a:redhat:openstack:18.0::el9
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.3-5.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.3-5.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.3-5.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Compliance Operator 1	Unaffected: 1781605005 , < * (rpm) cpe:/a:redhat:openshift_compliance_operator:1::el9
Red Hat	Custom Metric Autoscaler 2.19	Unaffected: 1780101239 , < * (rpm) cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9
Red Hat	Multicluster Global Hub 1.3.4	Unaffected: 1779210675 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.3::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1779838819 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1780320809 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.2-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.9-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1.0.3-1779996197 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783914276 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1779828691 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783544461 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787105216 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1786711400 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788232548 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788301844 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787815645 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787292256 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1786711936 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787652771 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787292260 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787652772 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787329583 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787330073 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787801527 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788315638 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185839 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185798 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185733 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185436 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185842 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185848 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788186007 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185846 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185899 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787051722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611780 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612055 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250351 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612219 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787207322 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786614543 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787089049 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1787105202 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787012376 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787013251 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift distributed tracing 3.11.0	Unaffected: 1788356473 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.11::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1778056267 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1778056233 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1778056245 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1788561841 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.9	Unaffected: 1788595574 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1786655676 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1786654613 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1786654596 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1786655467 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1786654867 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Builds for Red Hat OpenShift	cpe:/a:redhat:openshift_builds:1
Red Hat	cert-manager Operator for Red Hat OpenShift	cpe:/a:redhat:cert_manager:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5 cpe:/a:redhat:logging:6
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	mirror registry for Red Hat OpenShift	cpe:/a:redhat:mirror_registry:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift API for Data Protection	cpe:/a:redhat:openshift_api_data_protection:1
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat AI Inference Server	cpe:/a:redhat:ai_inference_server:3
Red Hat	Red Hat AMQ Broker 7	cpe:/a:redhat:amq_broker:7
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat Certification Program for Red Hat Enterprise Linux 9	cpe:/a:redhat:certifications:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat JBoss Web Server 6	cpe:/a:redhat:jboss_enterprise_web_server:6
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 1	cpe:/a:redhat:service_interconnect:1
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Service Telemetry Framework 1.5	cpe:/a:redhat:stf:1.5
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

Jakub Ciolek - https://ciolek.dev/

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T17:51:46.207289Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:19:55.848Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.1.1-7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.10-6.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.14-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.14-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-3.el10_1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-25.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-26.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-5.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.7-3.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-4.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-5.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.8-5.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.0-3.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-7.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "7:5.8.2-3.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.22.2-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.43.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:0.8.5-2.el10_0.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.2.2-6.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-24.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-4.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-3.el10_0.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el10_0.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-7.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.39.9-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:5.4.0-15.el10_0.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.18.1-3.el10_0.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-4.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.2-4.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.4.0-7.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.11-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260422204008.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-30.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-14.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-7.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.1-10.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260520103055.afee755d",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-1.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260515174849.ad008a3a",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260803064027.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260803064027.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260515174849.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260515174849.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-14.el9_7",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-15.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-21.el9_7",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-8.el9_7.1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-6.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:5.8.2-3.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.22.2-6.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.43.1-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.9.0-3.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.26.11-1.el9_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:4.4.1-22.el9_2.11",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.11.4-0.1.el9_2.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.2.0-3.el9_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.29.7-1.el9_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-5.el9_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.0.9-12.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:76.1-6.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.33.15-1.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4:4.9.4-20.el9_4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.14.6-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-27.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-8.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-8.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "5:5.4.0-20.el9_6.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el9_6.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-14.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-21.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.39.9-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.6.2-3.el9_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.18.1-5.el9_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-7.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:0.8.5-2.el9_6.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.4.0-7.rhaos4.15.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-sensubility",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.1-1.1.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.23-22.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.26-9.5.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Services on OpenShift 18.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.3-5.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.3-5.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.3-5.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator 1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781605005",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler 2.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780101239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779210675",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779838819",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780320809",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.2-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.9-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.0.3-1779996197",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-registry-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783914276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779828691",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-router-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787105216",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786711400",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-registry-job-async-upload-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788232548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788301844",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787815645",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787292256",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786711936",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787652771",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787292260",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787652772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ta-lmes-driver-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787329583",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787330073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787801527",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788315638",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185798",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185733",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185436",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185842",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185848",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788186007",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185899",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feast-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787051722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612055",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250351",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612219",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787207322",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ta-lmes-driver-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786614543",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787105202",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787012376",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787013251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.11.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788356473",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-collector-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778056267",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778056233",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-target-allocator-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778056245",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788561841",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788595574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786655676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654613",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654596",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786655467",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654867",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Builds for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel8",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5",
              "cpe:/a:redhat:logging:6"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "affected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:1"
            ],
            "defaultStatus": "unknown",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-rhel8",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-rhel9",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-jenkins",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-golang-builder-container",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-golang-builder-container",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp26/3scale-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp26/operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-neuron-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-tpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-neuron-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "affected",
            "packageName": "amq7/amq-broker-rhel9-operator",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-danielqsj-kafka_exporter",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhbac-4/hawtio-rhel9-operator",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-rhel8-operator",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-rhel9-operator",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/coredns-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "runc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_web_server:6"
            ],
            "defaultStatus": "affected",
            "packageName": "jboss-webserver/jws-rhel9-operator",
            "product": "Red Hat JBoss Web Server 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/base-image-neuron-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-codeflare-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-agent-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-core-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-maas-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-runtime-generic-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-must-gather-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-spark-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ta-lmes-job-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-sdn-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-sdn-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-api",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-api-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoso-operators/sg-core-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/ec-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-selinuxd-rhel8",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:stf:1.5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "stf/sg-core-rhel9",
            "product": "Service Telemetry Framework 1.5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-08T01:06:57.670Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS)."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-764",
                "description": "Multiple Locks of a Critical Resource",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T12:05:05.649Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
          },
          {
            "name": "RHBZ#2456338",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16101"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56910"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27076"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:14391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39810"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34365"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20569"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23103"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19715"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16024"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19550"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:18032"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:18027"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17084"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19719"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19750"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20570"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22713"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19714"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20571"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19450"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10217"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11881"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11863"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17075"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29195"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23102"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19133"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19139"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19137"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19134"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19136"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22937"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19144"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19135"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22450"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24470"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19156"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19132"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29035"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33722"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10704"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16875"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11507"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11514"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48790"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:15980"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19634"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51288"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49944"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16102"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25252"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25251"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47719"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47722"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47721"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25248"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49600"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25250"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34192"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47714"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47716"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47910"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34196"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49509"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19721"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20607"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20608"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19722"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16021"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19839"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19720"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22709"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24337"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20609"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:14200"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10219"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11711"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11704"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29455"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29703"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19350"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19352"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19351"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23228"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19353"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22714"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26447"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19369"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28074"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26571"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26636"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22423"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22347"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23345"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:7385"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:7291"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22485"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57409"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57801"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57802"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65343"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:14162"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66084"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65514"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55901"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55898"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55902"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55900"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21769"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16101: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56910: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:14391: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28047: Red Hat OpenStack Platform 17.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23103: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19715: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16024: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19550: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:18032: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:18027: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17084: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19750: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20570: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22713: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19714: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20571: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19450: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10217: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11712: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11881: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11863: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17075: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29195: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23102: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19133: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19139: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19137: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19134: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19136: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19156: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19132: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29035: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19126: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10704: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16875: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11507: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11514: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48790: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:15980: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19634: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51288: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49944: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16102: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25251: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47719: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47722: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47721: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48036: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49600: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47712: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47714: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47716: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47910: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49509: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20608: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19722: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16021: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20556: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19839: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28038: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22709: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24337: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:14200: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10219: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11711: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11704: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29455: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29703: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19350: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19352: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19351: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26447: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19369: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28074: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26571: Compliance Operator 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23345: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:7385: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:7291: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57409: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57801: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57802: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65343: Red Hat OpenShift distributed tracing 3.11.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:14162: Red Hat OpenShift distributed tracing 3.9.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66084: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65514: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55901: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55898: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55902: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55903: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55900: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21769: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-08T02:01:16.213Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-08T01:06:57.670Z",
            "value": "Made public."
          }
        ],
        "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "Conn.handleKeyUpdate"
            },
            {
              "name": "clientHandshakeStateTLS13.establishHandshakeKeys"
            },
            {
              "name": "clientHandshakeStateTLS13.readServerFinished"
            },
            {
              "name": "serverHandshakeStateTLS13.sendServerParameters"
            },
            {
              "name": "serverHandshakeStateTLS13.readClientFinished"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.HandleData"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev/"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-667: Improper Locking",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:57.670Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/763767"
        },
        {
          "url": "https://go.dev/issue/78334"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4870"
        }
      ],
      "title": "Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32283",
    "datePublished": "2026-04-08T01:06:57.670Z",
    "dateReserved": "2026-03-11T16:38:46.556Z",
    "dateUpdated": "2026-09-10T12:05:05.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33818 (GCVE-0-2026-33818)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-09-10 16:34

Title

Enforce maximum recursion depth in encoding/asn1

Summary

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:11 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80405
https://groups.google.com/g/golang-announce/c/94p…
https://go.dev/cl/814980
https://pkg.go.dev/vuln/GO-2026-5972

Impacted products

1 product

Vendor	Product	Version
Go standard library	encoding/asn1	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Marwan Atia (marwansamir688@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33818",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:11:19.904646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:12:34.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "encoding/asn1",
          "product": "encoding/asn1",
          "programRoutines": [
            {
              "name": "parseSequenceOf"
            },
            {
              "name": "parseField"
            },
            {
              "name": "UnmarshalWithParams"
            },
            {
              "name": "Unmarshal"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marwan Atia (marwansamir688@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-10T16:34:27.711Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80405"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://go.dev/cl/814980"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "title": "Enforce maximum recursion depth in encoding/asn1"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33818",
    "datePublished": "2026-08-13T21:58:52.821Z",
    "dateReserved": "2026-03-23T20:35:32.815Z",
    "dateUpdated": "2026-09-10T16:34:27.711Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44705 (GCVE-0-2026-44705)

Vulnerability from cvelistv5 – Published: 2026-06-11 15:42 – Updated: 2026-06-13 02:20

Title

tmp: Path Traversal via unsanitized prefix/postfix enables directory escape

Summary

tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By embedding traversal sequences (e.g., ../) or path separators in these parameters, attackers can cause files to be created outside the configured temporary base directory at attacker-controlled locations with the privileges of the running process. This vulnerability affects applications that pass user-controlled data to tmp's file/directory creation functions without proper input sanitization. This vulnerability is fixed in 0.2.6.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-13 02:18 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/raszi/node-tmp/security/adviso…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
raszi	node-tmp	Affected: < 0.2.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44705",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-13T02:18:03.998417Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-13T02:20:44.547Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "node-tmp",
          "vendor": "raszi",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.2.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By embedding traversal sequences (e.g., ../) or path separators in these parameters, attackers can cause files to be created outside the configured temporary base directory at attacker-controlled locations with the privileges of the running process. This vulnerability affects applications that pass user-controlled data to tmp\u0027s file/directory creation functions without proper input sanitization. This vulnerability is fixed in 0.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-11T15:42:46.565Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65"
        }
      ],
      "source": {
        "advisory": "GHSA-ph9p-34f9-6g65",
        "discovery": "UNKNOWN"
      },
      "title": "tmp: Path Traversal via unsanitized prefix/postfix enables directory escape"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44705",
    "datePublished": "2026-06-11T15:42:46.565Z",
    "dateReserved": "2026-05-07T17:07:09.317Z",
    "dateUpdated": "2026-06-13T02:20:44.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-49477 (GCVE-0-2026-49477)

Vulnerability from cvelistv5 – Published: 2026-07-14 20:51 – Updated: 2026-07-21 14:49

Title

Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser

Summary

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 14:49 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-1333 - Inefficient Regular Expression Complexity

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/facelessuser/soupsieve/securit…	x_refsource_CONFIRM
https://github.com/facelessuser/soupsieve/commit/…	x_refsource_MISC
https://github.com/facelessuser/soupsieve/release…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
facelessuser	soupsieve	Affected: < 2.8.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-49477",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T14:49:25.096784Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:49:40.914Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "soupsieve",
          "vendor": "facelessuser",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.8.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1333",
              "description": "CWE-1333: Inefficient Regular Expression Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T20:51:29.369Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37"
        },
        {
          "name": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3"
        },
        {
          "name": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4"
        }
      ],
      "source": {
        "advisory": "GHSA-836r-79rf-4m37",
        "discovery": "UNKNOWN"
      },
      "title": "Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-49477",
    "datePublished": "2026-07-14T20:51:29.369Z",
    "dateReserved": "2026-05-30T04:17:43.095Z",
    "dateUpdated": "2026-07-21T14:49:40.914Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56852 (GCVE-0-2026-56852)

Vulnerability from cvelistv5 – Published: 2026-07-21 19:18 – Updated: 2026-08-10 22:57

Title

Infinite loop on invalid input in golang.org/x/text

Summary

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 13:26 UTC

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

Go Google root

References

3 references

URL	Tags
https://go.dev/issue/80142
https://go.dev/cl/794100
https://pkg.go.dev/vuln/GO-2026-5970

Impacted products

1 product

Vendor	Product	Version
golang.org/x/text	golang.org/x/text/unicode/norm	Affected: 0 , < 0.39.0 (semver)

Credits

Viky Choi ("vikychoi" on GitHub)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56852",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T13:26:14.918983Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-835",
                "description": "CWE-835 Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T13:26:20.232Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/text/unicode/norm",
          "product": "golang.org/x/text/unicode/norm",
          "programRoutines": [
            {
              "name": "nextComposed"
            },
            {
              "name": "Form.Append"
            },
            {
              "name": "Form.AppendString"
            },
            {
              "name": "Form.Bytes"
            },
            {
              "name": "Form.FirstBoundary"
            },
            {
              "name": "Form.FirstBoundaryInString"
            },
            {
              "name": "Form.IsNormal"
            },
            {
              "name": "Form.IsNormalString"
            },
            {
              "name": "Form.LastBoundary"
            },
            {
              "name": "Form.NextBoundary"
            },
            {
              "name": "Form.NextBoundaryInString"
            },
            {
              "name": "Form.Properties"
            },
            {
              "name": "Form.PropertiesString"
            },
            {
              "name": "Form.QuickSpan"
            },
            {
              "name": "Form.QuickSpanString"
            },
            {
              "name": "Form.Span"
            },
            {
              "name": "Form.SpanString"
            },
            {
              "name": "Form.String"
            },
            {
              "name": "Form.Transform"
            },
            {
              "name": "Iter.Init"
            },
            {
              "name": "Iter.InitString"
            },
            {
              "name": "Iter.Next"
            },
            {
              "name": "Iter.Seek"
            },
            {
              "name": "normReader.Read"
            },
            {
              "name": "normWriter.Write"
            }
          ],
          "vendor": "golang.org/x/text",
          "versions": [
            {
              "lessThan": "0.39.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Viky Choi (\"vikychoi\" on GitHub)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T22:57:54.703Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80142"
        },
        {
          "url": "https://go.dev/cl/794100"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "title": "Infinite loop on invalid input in golang.org/x/text"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56852",
    "datePublished": "2026-07-21T19:18:59.951Z",
    "dateReserved": "2026-06-23T15:10:49.352Z",
    "dateUpdated": "2026-08-10T22:57:54.703Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56853 (GCVE-0-2026-56853)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:23

Title

Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http

Summary

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:22 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80205
https://go.dev/cl/795540
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6089

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56853",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:22:45.475320Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:23:18.680Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "conn.readRequest"
            },
            {
              "name": "conn.serve"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.092Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80205"
        },
        {
          "url": "https://go.dev/cl/795540"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "title": "Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56853",
    "datePublished": "2026-08-13T21:58:53.092Z",
    "dateReserved": "2026-06-23T15:10:49.352Z",
    "dateUpdated": "2026-08-14T15:23:18.680Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56858 (GCVE-0-2026-56858)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:32

Title

Fix Javascript regexp context tracking in html/template

Summary

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:31 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80435
https://go.dev/cl/807100
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6091

Impacted products

1 product

Vendor	Product	Version
Go standard library	html/template	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Ali Sherif

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:31:30.140536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:32:29.852Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "html/template",
          "product": "html/template",
          "programRoutines": [
            {
              "name": "tJS"
            },
            {
              "name": "Template.Execute"
            },
            {
              "name": "Template.ExecuteTemplate"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ali Sherif"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, pathological inputs could close an unescaped \u0027/\u0027 early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.354Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80435"
        },
        {
          "url": "https://go.dev/cl/807100"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "title": "Fix Javascript regexp context tracking in html/template"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56858",
    "datePublished": "2026-08-13T21:58:53.354Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T15:32:29.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:65514

CVE-2026-15792 (GCVE-0-2026-15792)

CVE-2026-16221 (GCVE-0-2026-16221)

CVE-2026-18255 (GCVE-0-2026-18255)

CVE-2026-32283 (GCVE-0-2026-32283)

CVE-2026-33818 (GCVE-0-2026-33818)

CVE-2026-44705 (GCVE-0-2026-44705)

CVE-2026-49477 (GCVE-0-2026-49477)

CVE-2026-56852 (GCVE-0-2026-56852)

CVE-2026-56853 (GCVE-0-2026-56853)

CVE-2026-56858 (GCVE-0-2026-56858)

Tags

Sightings

Nomenclature