RHSA-2026:69255
Vulnerability from csaf_redhat - Published: 2026-09-21 08:25 - Updated: 2026-09-21 17:00Summary
Red Hat Security Advisory: Red Hat Quay 3.16.6
Severity
Important
Notes
Topic: Red Hat Quay 3.16.6 is now available with bug fixes.
Details: Quay 3.16.6
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Moderate
A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url(). A repository administrator can supply a crafted hostname that causes the Quay mirror worker to make requests via Skopeo to internal network services, cloud metadata endpoints, or other resources not intended to be reachable from the Quay application.
6.8 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability arises because fast-uri does not correctly interpret backslash characters as authority delimiters in Uniform Resource Locators (URLs), unlike Node.js's native WHATWG URL parser. This discrepancy can cause applications that use fast-uri for security policy enforcement, such as allowlists or Server-Side Request Forgery (SSRF) filtering, to misidentify the intended host. Consequently, an attacker could bypass these security policies, potentially redirecting traffic to unintended internal or sensitive network destinations.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.
7.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.
7.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in soupsieve, a CSS selector library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted, untrusted CSS selector strings. The flaw occurs due to a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value, leading to CPU exhaustion.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes(), getpixel, convert, or save can then read beyond the mapped region, disclosing adjacent process memory or causing a fault.
9.1 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in WebOb, a library for HTTP requests and responses. This vulnerability allows an unauthenticated attacker to bypass URL validation checks by injecting leading control characters or spaces into a redirect target. This can lead to an open redirect, enabling attackers to send users to malicious websites for phishing or to steal OAuth and Single Sign-On (SSO) tokens. Exploitation requires the user to follow the crafted redirect.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Podman, a tool for managing OCI containers and pods. A malicious container image can be crafted with an environment variable that has a key but no value, or an asterisk (*), to trick Podman. This vulnerability causes Podman to pass host environment variables into the container. Consequently, a malicious image could exfiltrate all Podman environment variables set in the session from which the container is launched, leading to information disclosure.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation, and ImagingExpand() computes output dimensions with unchecked signed integer arithmetic. This can lead to denial of service and limited integrity impact via heap corruption.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the library's image processing functions, specifically when handling image coordinates near certain limits. This flaw, a native heap out-of-bounds write, could lead to a denial of service (DoS), making the affected system or application unavailable.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows an attacker to trigger controlled native heap corruption by supplying an output image whose mode does not match the transform's declared output mode when using the ImageCms.ImageCmsTransform.apply API. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Moderate
A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application's calling thread.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a denial of service (DoS) through request failure or process termination in affected applications.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in axios. This vulnerability involves prototype pollution read-side gadgets within the basic authentication subfield handling. If an application is already susceptible to a separate prototype pollution issue and makes an axios request without specifying username or password in its authentication object, an attacker can inject malicious values. This allows for outbound request tampering, enabling the attacker to inject or replace basic authentication credentials in outgoing requests. Under specific application conditions, this could also lead to credential disclosure.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If successfully exploited, an attacker can route affected plaintext HTTP requests through a malicious proxy, potentially observing sensitive data such as authentication headers and request bodies, and even returning their own responses.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in axios. A remote attacker could exploit an incomplete depth-limit bypass when the component serializes objects with specific top-level keys. By manipulating object keys and nested values during form or parameter serialization, an attacker can trigger a processing error. This can lead to a denial of service, making the affected request path unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially leading to unauthorized modification or deletion of files on the system.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Moderate
A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-13149
Known not affected
19 products, the same list as for
CVE-2026-13149
Threats
Impact
Moderate
References
330 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.16.6 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.16.6",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:69255",
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15792",
"url": "https://access.redhat.com/security/cve/CVE-2026-15792"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15927",
"url": "https://access.redhat.com/security/cve/CVE-2026-15927"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16221",
"url": "https://access.redhat.com/security/cve/CVE-2026-16221"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18255",
"url": "https://access.redhat.com/security/cve/CVE-2026-18255"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39822",
"url": "https://access.redhat.com/security/cve/CVE-2026-39822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44705",
"url": "https://access.redhat.com/security/cve/CVE-2026-44705"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-49477",
"url": "https://access.redhat.com/security/cve/CVE-2026-49477"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54058",
"url": "https://access.redhat.com/security/cve/CVE-2026-54058"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54060",
"url": "https://access.redhat.com/security/cve/CVE-2026-54060"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54770",
"url": "https://access.redhat.com/security/cve/CVE-2026-54770"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55379",
"url": "https://access.redhat.com/security/cve/CVE-2026-55379"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55380",
"url": "https://access.redhat.com/security/cve/CVE-2026-55380"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-57231",
"url": "https://access.redhat.com/security/cve/CVE-2026-57231"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59197",
"url": "https://access.redhat.com/security/cve/CVE-2026-59197"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59199",
"url": "https://access.redhat.com/security/cve/CVE-2026-59199"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59200",
"url": "https://access.redhat.com/security/cve/CVE-2026-59200"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59204",
"url": "https://access.redhat.com/security/cve/CVE-2026-59204"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59205",
"url": "https://access.redhat.com/security/cve/CVE-2026-59205"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59879",
"url": "https://access.redhat.com/security/cve/CVE-2026-59879"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59885",
"url": "https://access.redhat.com/security/cve/CVE-2026-59885"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59886",
"url": "https://access.redhat.com/security/cve/CVE-2026-59886"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67213",
"url": "https://access.redhat.com/security/cve/CVE-2026-67213"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67214",
"url": "https://access.redhat.com/security/cve/CVE-2026-67214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67313",
"url": "https://access.redhat.com/security/cve/CVE-2026-67313"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67314",
"url": "https://access.redhat.com/security/cve/CVE-2026-67314"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67320",
"url": "https://access.redhat.com/security/cve/CVE-2026-67320"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67321",
"url": "https://access.redhat.com/security/cve/CVE-2026-67321"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
"url": "https://access.redhat.com/security/cve/CVE-2026-69152"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73086",
"url": "https://access.redhat.com/security/cve/CVE-2026-73086"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75593",
"url": "https://access.redhat.com/security/cve/CVE-2026-75593"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-82417",
"url": "https://access.redhat.com/security/cve/CVE-2026-82417"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69255.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.16.6",
"tracking": {
"current_release_date": "2026-09-21T17:00:21+00:00",
"generator": {
"date": "2026-09-21T17:00:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:69255",
"initial_release_date": "2026-09-21T08:25:12+00:00",
"revision_history": [
{
"date": "2026-09-21T08:25:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-21T08:25:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-21T17:00:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.16",
"product": {
"name": "Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1789191825"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1789191015"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Ad8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1789191920"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1789191073"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Aa6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1789191139"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Ab9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1789492236"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1789191202"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1789627085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Afda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1789190909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Ac01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1789563753"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Ad2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1789191015"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1789191073"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Adfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1789492236"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Afae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1789191202"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1789190909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Adeee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1789563753"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1789191015"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1789191073"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1789492236"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1789191202"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1789190909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1789563753"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1789563753"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-15792",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-21T17:01:51.555730+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503746"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "BuildKit is used by several Red Hat products to build container images. This issue allows a malicious BuildKit frontend or client to cause the BuildKit build process to crash. Exploiting this issue requires the ability to supply a build definition (for example, a Dockerfile specifying a custom #syntax frontend) to a BuildKit-based build; it does not allow remote code execution or exposure of data. The issue is fixed upstream in BuildKit version 0.31.2. Red Hat Hardened Images (Buildah, Podman, and Trivy) has already shipped the fixed version. Other affected Red Hat products are being assessed and will ship the fixed version of BuildKit in upcoming releases.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15792"
},
{
"category": "external",
"summary": "RHBZ#2503746",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503746"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6"
}
],
"release_date": "2026-07-21T16:10:21.395000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Avoid building container images using BuildKit frontends from untrusted sources. A BuildKit frontend is typically specified using a \"# syntax\" directive at the top of a Dockerfile, or with the \"--frontend\" option to the \"buildctl build\" command. Only use frontend images that come from a trusted source.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request"
},
{
"acknowledgments": [
{
"names": [
"Shaon Hossain"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Martin Brodeur"
]
}
],
"cve": "CVE-2026-15927",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-13T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2501256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s repository-level mirror configuration\nfeature. The POST and PUT handlers in endpoints/api/mirror.py accept an\nexternal_reference parameter without SSRF validation, unlike the\norganization-level mirror handlers which apply validate_external_registry_url().\nA repository administrator can supply a crafted hostname that causes the Quay\nmirror worker to make requests via Skopeo to internal network services, cloud\nmetadata endpoints, or other resources not intended to be reachable from the\nQuay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Red Hat Quay\u0027s repository-level mirror configuration allows an authenticated repository administrator to conduct Server-Side Request Forgery (SSRF). By providing a specially crafted hostname, an attacker can force the Quay mirror worker to connect to internal network services or cloud metadata endpoints, potentially exposing sensitive internal resources. This risk is limited to actions performed by an authenticated administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15927"
},
{
"category": "external",
"summary": "RHBZ#2501256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15927"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927"
}
],
"release_date": "2026-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Restrict network egress from Quay mirror worker pods/containers using network\npolicies or firewall rules to block access to internal network ranges\n(10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and cloud metadata endpoints\n(169.254.169.254, metadata.google.internal). Limit repository creation and\nadmin privileges to trusted users via Quay\u0027s RBAC configuration. If\nrepository-level mirroring is not required, disable the feature or restrict\naccess to the mirror API endpoints through a reverse proxy.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation"
},
{
"cve": "CVE-2026-16221",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-19T15:02:40.167601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502307"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability arises because fast-uri does not correctly interpret backslash characters as authority delimiters in Uniform Resource Locators (URLs), unlike Node.js\u0027s native WHATWG URL parser. This discrepancy can cause applications that use fast-uri for security policy enforcement, such as allowlists or Server-Side Request Forgery (SSRF) filtering, to misidentify the intended host. Consequently, an attacker could bypass these security policies, potentially redirecting traffic to unintended internal or sensitive network destinations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in fast-uri allows for a security policy bypass due to inconsistent URL parsing between fast-uri and Node.js\u0027s native WHATWG URL parser. Applications within Red Hat Hardened Images that rely on fast-uri for host-based policy enforcement, such as allowlists or Server-Side Request Forgery (SSRF) filtering, can be misled by specially crafted URLs. This could enable an attacker to redirect traffic to unintended internal or sensitive network destinations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16221"
},
{
"category": "external",
"summary": "RHBZ#2502307",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502307"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16221",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16221"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx"
}
],
"release_date": "2026-07-19T14:08:32.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency"
},
{
"cve": "CVE-2026-18255",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2026-07-21T14:34:20+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508454"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "quay: quay: Global read-only superuser can view robot account tokens",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18255"
},
{
"category": "external",
"summary": "RHBZ#2508454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508454"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18255",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18255"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18255",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18255"
}
],
"release_date": "2026-07-21T14:34:20+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Remove users who can not be trusted with robot account credentials from GLOBAL_READONLY_SUPER_USERS.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "quay: quay: Global read-only superuser can view robot account tokens"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33818",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:12:37.151735+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "RHBZ#2515815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://go.dev/cl/814980",
"url": "https://go.dev/cl/814980"
},
{
"category": "external",
"summary": "https://go.dev/issue/80405",
"url": "https://go.dev/issue/80405"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5972",
"url": "https://pkg.go.dev/vuln/GO-2026-5972"
}
],
"release_date": "2026-08-13T21:58:52.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-08T17:01:53.592869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39822"
},
{
"category": "external",
"summary": "RHBZ#2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
},
{
"category": "external",
"summary": "https://go.dev/cl/797880",
"url": "https://go.dev/cl/797880"
},
{
"category": "external",
"summary": "https://go.dev/issue/79005",
"url": "https://go.dev/issue/79005"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
"url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4970",
"url": "https://pkg.go.dev/vuln/GO-2026-4970"
}
],
"release_date": "2026-07-08T15:46:27.199000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
},
{
"cve": "CVE-2026-44705",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-11T17:01:27.295887+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Applications that pass user-controlled data to the file or directory creation functions without input sanitization are vulnerable to this issue. This flaw allows files to be created in arbitrary locations with the privileges of the running process. Due to this reason, this vulnerability has been rated with an Important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44705"
},
{
"category": "external",
"summary": "RHBZ#2487946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705"
},
{
"category": "external",
"summary": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65",
"url": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65"
}
],
"release_date": "2026-06-11T15:42:46.565000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, validate and sanitize any user-controlled data before it is passed to the prefix, postfix or dir options of the file or directory creation functions, specifically rejecting or stripping input containing path traversal sequences.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape"
},
{
"cve": "CVE-2026-49477",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-07-14T22:04:22.677547+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500752"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in soupsieve, a CSS selector library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted, untrusted CSS selector strings. The flaw occurs due to a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value, leading to CPU exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A regular expression denial of service (ReDoS) flaw in the soupsieve library can lead to CPU exhaustion. A remote attacker can exploit this by supplying a small, specially crafted CSS selector string to applications that process untrusted CSS, potentially blocking worker threads and causing a complete service denial in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-49477"
},
{
"category": "external",
"summary": "RHBZ#2500752",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500752"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-49477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49477"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49477",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49477"
},
{
"category": "external",
"summary": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3",
"url": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3"
},
{
"category": "external",
"summary": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4",
"url": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4"
},
{
"category": "external",
"summary": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37",
"url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37"
}
],
"release_date": "2026-07-14T20:51:29.369000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings"
},
{
"cve": "CVE-2026-54058",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-07-14T17:02:34.864708+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500057"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes(), getpixel, convert, or save can then read beyond the mapped region, disclosing adjacent process memory or causing a fault.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Pillow is vulnerable to an out-of-bounds read when processing a crafted uncompressed McIdas AREA image via the mmap raw codec. A remote attacker who can supply such an image to a service that loads it without user interaction may disclose adjacent process memory or trigger a denial of service. Fixed in Pillow 12.3.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54058"
},
{
"category": "external",
"summary": "RHBZ#2500057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500057"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54058",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54058"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",
"url": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9719",
"url": "https://github.com/python-pillow/Pillow/pull/9719"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93"
}
],
"release_date": "2026-07-14T16:27:38.050000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image"
},
{
"cve": "CVE-2026-54060",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-07-06T20:02:29.509113+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497466"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library\u0027s font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Pillow prior to version 12.3.0. The FontFile.compile() method in PIL/FontFile.py assembles per-glyph images into a combined bitmap using Image.new() without calling Image._decompression_bomb_check(). This allows a specially crafted font file to trigger excessive memory allocation during conversion or saving, leading to denial of service via resource exhaustion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54060"
},
{
"category": "external",
"summary": "RHBZ#2497466",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497466"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54060",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
"url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
"url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2"
}
],
"release_date": "2026-07-06T18:49:23.788000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files"
},
{
"cve": "CVE-2026-54770",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"discovery_date": "2026-08-20T16:52:08.382509+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520616"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebOb, a library for HTTP requests and responses. This vulnerability allows an unauthenticated attacker to bypass URL validation checks by injecting leading control characters or spaces into a redirect target. This can lead to an open redirect, enabling attackers to send users to malicious websites for phishing or to steal OAuth and Single Sign-On (SSO) tokens. Exploitation requires the user to follow the crafted redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webob: WebOb: Open redirect vulnerability leading to phishing and token theft",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an open redirect vulnerability in the WebOb library. An unauthenticated attacker can craft a malicious URL that, when processed by applications utilizing WebOb for redirects, bypasses URL validation. This could lead to users being redirected to attacker-controlled sites, facilitating phishing attacks or the theft of authentication tokens, provided the user follows the redirect.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54770"
},
{
"category": "external",
"summary": "RHBZ#2520616",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520616"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54770"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54770",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54770"
},
{
"category": "external",
"summary": "https://github.com/Pylons/webob/commit/ff89560643fb252751b4db8806a283b5377f1f07",
"url": "https://github.com/Pylons/webob/commit/ff89560643fb252751b4db8806a283b5377f1f07"
},
{
"category": "external",
"summary": "https://github.com/Pylons/webob/security/advisories/GHSA-6hx8-3wjj-gr8g",
"url": "https://github.com/Pylons/webob/security/advisories/GHSA-6hx8-3wjj-gr8g"
},
{
"category": "external",
"summary": "https://github.com/Pylons/webob/tree/1.8.11",
"url": "https://github.com/Pylons/webob/tree/1.8.11"
}
],
"release_date": "2026-08-20T16:31:46.791000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Applications utilizing the WebOb library should implement strict validation of redirect target URLs. Configure applications to only allow redirects to trusted, fully-qualified URIs or to strictly allowlist permitted redirect destinations. Reject any redirect target that does not begin with an expected trusted host or a validated relative path, ensuring no leading whitespace or control characters are present.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webob: WebOb: Open redirect vulnerability leading to phishing and token theft"
},
{
"cve": "CVE-2026-55379",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-06T20:01:29.922515+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497452"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library\u0027s image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pillow: Pillow: Denial of Service via crafted BDF font file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Pillow Python imaging library. The BDF font file parser passes attacker-controlled dimensions to Image.new() without decompression bomb validation, allowing excessive memory allocation and denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55379"
},
{
"category": "external",
"summary": "RHBZ#2497452",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497452"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
"url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
"url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc"
}
],
"release_date": "2026-07-06T18:52:11.633000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Do not load BDF font files from untrusted sources. Applications that only process standard image formats (PNG, JPEG, etc.) and do not use BdfFontFile or ImageFont.load() with BDF files are not affected.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pillow: Pillow: Denial of Service via crafted BDF font file"
},
{
"cve": "CVE-2026-55380",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-07-06T20:01:42.245051+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial-of-service vulnerability was found in Pillow\u0027s GdImageFile plugin. The GdImageFile._open() function reads image dimensions from GD 2.x file headers and stores them without performing a decompression bomb check. A crafted .gd file of approximately 1 KB can trigger an unchecked 4.3 GB C-heap allocation, potentially crashing the process or exhausting memory on systems with insufficient resources. This issue is fixed in Pillow 12.3.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55380"
},
{
"category": "external",
"summary": "RHBZ#2497455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
"url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",
"url": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm"
}
],
"release_date": "2026-07-06T18:50:14.789000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Avoid processing untrusted GD 2.x image files with PIL.GdImageFile.open(). Use Image.open() instead, which includes decompression bomb protections for supported formats. If GdImageFile must be used, validate the image dimensions before calling load(). Restricting accepted image formats at the application boundary to only those explicitly needed can reduce exposure.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file"
},
{
"cve": "CVE-2026-56852",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-21T20:01:56.266823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504233"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "RHBZ#2504233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://go.dev/cl/794100",
"url": "https://go.dev/cl/794100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80142",
"url": "https://go.dev/issue/80142"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5970",
"url": "https://pkg.go.dev/vuln/GO-2026-5970"
}
],
"release_date": "2026-07-21T19:18:59.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
},
{
"cve": "CVE-2026-56853",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:14:53.561638+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "RHBZ#2515827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://go.dev/cl/795540",
"url": "https://go.dev/cl/795540"
},
{
"category": "external",
"summary": "https://go.dev/issue/80205",
"url": "https://go.dev/issue/80205"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6089",
"url": "https://pkg.go.dev/vuln/GO-2026-6089"
}
],
"release_date": "2026-08-13T21:58:53.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
},
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
},
{
"cve": "CVE-2026-56862",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-13T22:16:41.928450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "RHBZ#2515839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://go.dev/cl/804261",
"url": "https://go.dev/cl/804261"
},
{
"category": "external",
"summary": "https://go.dev/issue/80528",
"url": "https://go.dev/issue/80528"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6090",
"url": "https://pkg.go.dev/vuln/GO-2026-6090"
}
],
"release_date": "2026-08-13T21:58:53.216000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
},
{
"cve": "CVE-2026-57231",
"cwe": {
"id": "CWE-914",
"name": "Improper Control of Dynamically-Identified Variables"
},
"discovery_date": "2026-06-26T17:01:34.294165+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493620"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Podman, a tool for managing OCI containers and pods. A malicious container image can be crafted with an environment variable that has a key but no value, or an asterisk (*), to trick Podman. This vulnerability causes Podman to pass host environment variables into the container. Consequently, a malicious image could exfiltrate all Podman environment variables set in the session from which the container is launched, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "podman: Podman: Information disclosure via malicious container image environment variables",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57231"
},
{
"category": "external",
"summary": "RHBZ#2493620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57231",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57231"
},
{
"category": "external",
"summary": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050",
"url": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050"
},
{
"category": "external",
"summary": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68",
"url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68"
}
],
"release_date": "2026-06-26T16:29:02.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "podman: Podman: Information disclosure via malicious container image environment variables"
},
{
"cve": "CVE-2026-59197",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-14T17:01:29.487456+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500043"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation, and ImagingExpand() computes output dimensions with unchecked signed integer arithmetic. This can lead to denial of service and limited integrity impact via heap corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Native heap out-of-bounds write",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Pillow\u0027s RankFilter API is vulnerable to a native heap out-of-bounds write when a caller supplies a very large odd filter size. Expansion runs before size validation and ImagingExpand uses unchecked signed integer arithmetic for output dimensions. A remote attacker who can drive RankFilter with attacker-controlled sizes may crash the process or corrupt heap memory. Fixed in Pillow 12.3.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59197"
},
{
"category": "external",
"summary": "RHBZ#2500043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500043"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59197"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",
"url": "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9695",
"url": "https://github.com/python-pillow/Pillow/pull/9695"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr"
}
],
"release_date": "2026-07-14T16:25:23.520000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Native heap out-of-bounds write"
},
{
"cve": "CVE-2026-59199",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-14T17:02:51.371888+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500061"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the library\u0027s image processing functions, specifically when handling image coordinates near certain limits. This flaw, a native heap out-of-bounds write, could lead to a denial of service (DoS), making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact is limited to denial of service. While the underlying issue is a heap out-of-bounds write, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59199"
},
{
"category": "external",
"summary": "RHBZ#2500061",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500061"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59199",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",
"url": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9703",
"url": "https://github.com/python-pillow/Pillow/pull/9703"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4"
}
],
"release_date": "2026-07-14T15:42:15.071000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing"
},
{
"cve": "CVE-2026-59200",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-14T17:02:45.929986+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500060"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of service via crafted PDF stream",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact is limited to denial of service via memory exhaustion. A small crafted PDF input can force unbounded decompression, but this does not lead to code execution or information disclosure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59200"
},
{
"category": "external",
"summary": "RHBZ#2500060",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500060"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59200",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59200"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09",
"url": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9718",
"url": "https://github.com/python-pillow/Pillow/pull/9718"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565"
}
],
"release_date": "2026-07-14T16:09:05.091000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of service via crafted PDF stream"
},
{
"cve": "CVE-2026-59204",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-07-14T16:02:11.802781+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500022"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact is limited to denial of service via excessive memory allocation. A crafted JPEG2000 file can trigger out-of-memory failures, but this does not lead to code execution or information disclosure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59204"
},
{
"category": "external",
"summary": "RHBZ#2500022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59204"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca",
"url": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9704",
"url": "https://github.com/python-pillow/Pillow/pull/9704"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j"
}
],
"release_date": "2026-07-14T15:38:29.545000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "If the application does not need JPEG2000 support, block .jp2, .j2k, .jpf, and .jpx uploads at the input layer.\n\nFor services that do process JPEG2000, set memory limits on the process or container (LimitAS= in systemd, or memory limits in Kubernetes/Podman) so a crafted image can only crash the worker, not the whole host. Add automatic restarts (Restart=always in systemd, or container restart policies) so the service recovers from OOM kills without someone having to intervene.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image"
},
{
"cve": "CVE-2026-59205",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-07-14T17:02:11.367224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500052"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows an attacker to trigger controlled native heap corruption by supplying an output image whose mode does not match the transform\u0027s declared output mode when using the ImageCms.ImageCmsTransform.apply API. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact is limited to denial of service. While the underlying issue is heap corruption via mode mismatch, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59205"
},
{
"category": "external",
"summary": "RHBZ#2500052",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500052"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59205",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59205"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",
"url": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9715",
"url": "https://github.com/python-pillow/Pillow/pull/9715"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6"
}
],
"release_date": "2026-07-14T15:48:39.962000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Most applications using Pillow\u0027s color management via profileToProfile() or applyTransform() are not exposed. Only code that calls ImageCmsTransform.apply() directly with a user-controlled output image whose mode does not match the transform can trigger the heap corruption. Audit your code for direct apply() calls to confirm.\n\nRHEL builds ship with ASLR, full RELRO/PIE, and FORTIFY_SOURCE by default, making escalation from crash to code execution much harder. For DoS containment, configure automatic service restart (Restart=always in systemd, or container restart policies) so the process recovers without manual intervention.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
},
{
"cve": "CVE-2026-59879",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-07-08T17:02:16.432203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498158"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service vulnerability in Immutable.js affects Red Hat products that process untrusted input through List operations. An attacker can trigger an infinite loop or unbounded memory allocation by providing specially crafted large index values, leading to a service disruption. Additionally, silent data corruption may occur due to integer wrapping.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59879"
},
{
"category": "external",
"summary": "RHBZ#2498158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498158"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84",
"url": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a",
"url": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735"
}
],
"release_date": "2026-07-08T15:47:24.885000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should implement input validation to reject or clamp any externally supplied List index or key-path segment that exceeds a sane maximum, specifically values greater than or equal to 2^30. Additionally, running request handling in isolated worker processes with capped heap sizes (e.g., using `--max-old-space-size`) can contain the impact of a potential process abort.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations"
},
{
"cve": "CVE-2026-59885",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-07-14T18:17:12.157807+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500380"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in pyasn1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call, allowing denial of service in applications that decode untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos). The corresponding encoders exhibit the same behavior when re-encoding attacker-supplied values. The arc-size limit introduced for CVE-2026-23490 does not mitigate this issue. This issue is fixed in pyasn1 version 0.6.4.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59885"
},
{
"category": "external",
"summary": "RHBZ#2500380",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59885"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",
"url": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"
}
],
"release_date": "2026-07-14T16:40:00.515000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER"
},
{
"cve": "CVE-2026-59886",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T17:01:19.689422+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500041"
}
],
"notes": [
{
"category": "description",
"text": "A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in pyasn1, rated as Important, could lead to a denial of service in Red Hat products that process untrusted ASN.1 data. A remote attacker could send a specially crafted BER, CER, or DER encoded REAL value with a large exponent, causing applications to consume excessive resources during decoding operations such as printing, logging, or arithmetic, thereby rendering the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59886"
},
{
"category": "external",
"summary": "RHBZ#2500041",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886",
"url": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"
}
],
"release_date": "2026-07-14T16:38:29.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "When processing untrusted ASN.1 data with pyasn1, avoid calling prettyPrint(), str(), float(), int(), or performing comparisons or arithmetic on decoded Real (ASN.1 REAL type) objects. Instead, inspect the raw (mantissa, base, exponent) tuple directly. Where logging decoded ASN.1 structures is necessary, filter out or sanitize Real-typed values before conversion.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values"
},
{
"cve": "CVE-2026-67213",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-29T14:01:09.009518+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508406"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application\u0027s calling thread.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An algorithmic denial of service flaw was found in the `nanoid` library. When calling `customAlphabet` or `customRandom` with a `size` parameter of `0`, the internal generation loop fails to meet its termination condition. In Node.js or browser execution contexts, an attacker who supplies an unvalidated, zero-value size parameter to these functions causes the thread to enter an infinite loop, driving CPU utilization to 100% and completely blocking event loop execution for that thread.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67213"
},
{
"category": "external",
"summary": "RHBZ#2508406",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508406"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67213"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7",
"url": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.6",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.6"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom",
"url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"
}
],
"release_date": "2026-07-29T13:32:01.534000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure application code validates the size parameter passed to customAlphabet or customRandom, rejecting or sanitizing zero-value inputs before passing them to nanoid.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation"
},
{
"cve": "CVE-2026-67214",
"cwe": {
"id": "CWE-839",
"name": "Numeric Range Comparison Without Minimum Check"
},
"discovery_date": "2026-07-29T14:01:28.637584+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508411"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library\u0027s non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An input validation flaw in Nano ID\u0027s non-secure module (`nanoid/non-secure`) causes an infinite loop in the `customAlphabet` and `nanoid` functions when processed with a negative size parameter. Because the decrementing loop counter never meets its termination condition, an unauthenticated attacker who passes an unvalidated negative integer value can block the NodeJS event loop, resulting in a thread hang and complete Denial of Service (DoS) for the host application.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67214"
},
{
"category": "external",
"summary": "RHBZ#2508411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508411"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67214"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49",
"url": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.16",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.16"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module",
"url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"
}
],
"release_date": "2026-07-29T13:32:02.265000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Sanitize all user-supplied integer inputs before passing them to `nanoid` or `customAlphabet` functions in the `nanoid/non-secure` module, ensuring the size parameter is strictly a non-negative integer.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions"
},
{
"cve": "CVE-2026-67313",
"discovery_date": "2026-08-01T13:03:08.824485+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a denial of service (DoS) through request failure or process termination in affected applications.",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67313"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67313",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67313"
}
],
"release_date": "2026-08-01T12:22:16.493000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON"
},
{
"cve": "CVE-2026-67314",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-08-01T13:03:49.884962+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510030"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in axios. This vulnerability involves prototype pollution read-side gadgets within the basic authentication subfield handling. If an application is already susceptible to a separate prototype pollution issue and makes an axios request without specifying username or password in its authentication object, an attacker can inject malicious values. This allows for outbound request tampering, enabling the attacker to inject or replace basic authentication credentials in outgoing requests. Under specific application conditions, this could also lead to credential disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67314"
},
{
"category": "external",
"summary": "RHBZ#2510030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67314",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67314"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67314",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67314"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g",
"url": "https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-auth-subfields",
"url": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-auth-subfields"
}
],
"release_date": "2026-08-01T12:22:16.603000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth"
},
{
"cve": "CVE-2026-67320",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-08-01T13:01:50.659496+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509993"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If successfully exploited, an attacker can route affected plaintext HTTP requests through a malicious proxy, potentially observing sensitive data such as authentication headers and request bodies, and even returning their own responses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67320"
},
{
"category": "external",
"summary": "RHBZ#2509993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509993"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67320"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67320",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67320"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc",
"url": "https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter",
"url": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter"
}
],
"release_date": "2026-08-01T12:22:17.547000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter"
},
{
"cve": "CVE-2026-67321",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-01T13:02:49.231124+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510011"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in axios. A remote attacker could exploit an incomplete depth-limit bypass when the component serializes objects with specific top-level keys. By manipulating object keys and nested values during form or parameter serialization, an attacker can trigger a processing error. This can lead to a denial of service, making the affected request path unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: axios: Denial of Service via object serialization bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67321"
},
{
"category": "external",
"summary": "RHBZ#2510011",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510011"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67321"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-maxdepth-bypass",
"url": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-maxdepth-bypass"
}
],
"release_date": "2026-08-01T12:22:18.177000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: axios: Denial of Service via object serialization bypass"
},
{
"cve": "CVE-2026-69152",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-03T18:01:13.566423+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69152"
},
{
"category": "external",
"summary": "RHBZ#2510722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
"url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
"url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
"url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
"url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
"url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
}
],
"release_date": "2026-08-03T16:33:36.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
},
{
"cve": "CVE-2026-73086",
"cwe": {
"id": "CWE-1241",
"name": "Use of Predictable Algorithm in Random Number Generator"
},
"discovery_date": "2026-08-11T17:11:45.607696+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Predictable ID generation due to integer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the nanoid JavaScript library allows a remote attacker to cause predictable ID generation by exploiting an integer overflow in the `nanoid(size)` function. This can lead to the compromise of session tokens, CSRF tokens, and API keys, bypassing security mechanisms. The attack requires specific conditions, contributing to its Important severity rather than Critical.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73086"
},
{
"category": "external",
"summary": "RHBZ#2514175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73086",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4",
"url": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3",
"url": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac",
"url": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/3.3.12",
"url": "https://github.com/ai/nanoid/releases/tag/3.3.12"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.11",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.11"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w",
"url": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w"
}
],
"release_date": "2026-08-11T16:46:23.024000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Predictable ID generation due to integer overflow"
},
{
"cve": "CVE-2026-75593",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-19T20:21:08.000514+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially leading to unauthorized modification or deletion of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in BuildKit allows a client with valid permissions to the BuildKit control API to perform unauthorized file modifications outside the intended build state directory. This issue is limited to authenticated clients, reducing the overall attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-75593"
},
{
"category": "external",
"summary": "RHBZ#2519913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-75593",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75593"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75593",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75593"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.31.2",
"url": "https://github.com/moby/buildkit/releases/tag/v0.31.2"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976"
}
],
"release_date": "2026-08-19T20:06:54.924000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "Restrict access to the BuildKit control API to only trusted users and services. Implement robust authentication and authorization policies for all clients interacting with the BuildKit daemon to prevent unauthorized access and potential file system escapes.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification"
},
{
"cve": "CVE-2026-82417",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-08-30T00:00:50.379994+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525936"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object\u0027s constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper validation in stringify function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service vulnerability was found in the qs package for Node.js. The stringify function does not verify that constructor.isBuffer is callable before invoking it. An attacker who can influence object shape, for example through query parameters parsed with allowPrototypes: true as Express 4 does by default, can cause qs.stringify to throw a TypeError when that data is re-serialized. In typical Node.js HTTP frameworks the error is caught per request and returns HTTP 500. In code paths without an error boundary, such as async handlers or background jobs, the process may exit.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-82417"
},
{
"category": "external",
"summary": "RHBZ#2525936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525936"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-82417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-82417"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6",
"url": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"
}
],
"release_date": "2026-08-29T23:51:27.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
},
{
"category": "workaround",
"details": "If an immediate upgrade to qs 6.16.0 is not feasible, avoid re-serializing attacker-influenced parsed query or body objects with qs.stringify. Where qs.parse is used directly, set allowPrototypes: false unless prototype keys are required. For Express applications, review whether the default query parser configuration is necessary. Wrapping qs.stringify calls in try/catch can limit impact to individual requests.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper validation in stringify function"
},
{
"cve": "CVE-2026-84375",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-01T21:51:30.205823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527118"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "RHBZ#2527118",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
"url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
"url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
"url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/pull/797",
"url": "https://github.com/nodeca/js-yaml/pull/797"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
}
],
"release_date": "2026-09-01T21:43:13.617000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T08:25:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…