RHSA-2026:73413

Vulnerability from csaf_redhat - Published: 2026-09-29 12:19 - Updated: 2026-10-03 15:57
Summary
Red Hat Security Advisory: OpenShift Virtualization v4.18 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.18 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization v4.18 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x —
Vendor Fix fix
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64 —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x —
Unresolved product id: Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64 —
Threats
Impact Important
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 3 products, the same list as for CVE-2026-33818
Known not affected 21 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 3 products, the same list as for CVE-2026-33818
Known not affected 21 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 3 products, the same list as for CVE-2026-33818
Known not affected 21 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 3 products, the same list as for CVE-2026-33818
Known not affected 21 products, the same list as for CVE-2026-33818
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:73413 self
https://access.redhat.com/security/cve/CVE-2026-33818 external
https://access.redhat.com/security/cve/CVE-2026-56858 external
https://access.redhat.com/security/cve/CVE-2026-56859 external
https://access.redhat.com/security/cve/CVE-2026-56860 external
https://access.redhat.com/security/cve/CVE-2026-56862 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-56860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://www.cve.org/CVERecord?id=CVE-2026-56860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 external
https://go.dev/cl/803681 external
https://go.dev/issue/80494 external
https://pkg.go.dev/vuln/GO-2026-6218 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release v4.18 is now available with updates to packages and images that fix several bugs and add enhancements.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.18 images.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:73413",
        "url": "https://access.redhat.com/errata/RHSA-2026:73413"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73413.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization v4.18 Images",
    "tracking": {
      "current_release_date": "2026-10-03T15:57:28+00:00",
      "generator": {
        "date": "2026-10-03T15:57:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:73413",
      "initial_release_date": "2026-09-29T12:19:06+00:00",
      "revision_history": [
        {
          "date": "2026-09-29T12:19:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-29T12:19:10+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-03T15:57:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Container Native Virtualization 4.18",
                "product": {
                  "name": "Red Hat Container Native Virtualization 4.18",
                  "product_id": "Red Hat Container Native Virtualization 4.18",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.18::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Container Native Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bridge-marker-rhel9@sha256%3Aaadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9\u0026tag=1790251193"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3A651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9\u0026tag=1790251360"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3A9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9\u0026tag=1790251706"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubemacpool-rhel9@sha256%3A8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9\u0026tag=1790251771"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3Ac353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9\u0026tag=1790251558"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-ipam-controller-rhel9@sha256%3A30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9\u0026tag=1790251689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3Aa3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9\u0026tag=1790251613"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3A458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9\u0026tag=1790251694"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bridge-marker-rhel9@sha256%3Abe78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9\u0026tag=1790251193"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3A85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9\u0026tag=1790251360"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3A0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9\u0026tag=1790251706"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubemacpool-rhel9@sha256%3A54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9\u0026tag=1790251771"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3Aa1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9\u0026tag=1790251558"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-ipam-controller-rhel9@sha256%3A8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9\u0026tag=1790251689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3A45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9\u0026tag=1790251613"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3Afd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9\u0026tag=1790251694"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bridge-marker-rhel9@sha256%3Ac20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9\u0026tag=1790251193"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3A967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9\u0026tag=1790251360"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3A354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9\u0026tag=1790251706"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubemacpool-rhel9@sha256%3A7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9\u0026tag=1790251771"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3A1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9\u0026tag=1790251558"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-ipam-controller-rhel9@sha256%3A324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9\u0026tag=1790251689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3A395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9\u0026tag=1790251613"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3A50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9\u0026tag=1790251694"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64 as a component of Red Hat Container Native Virtualization 4.18",
          "product_id": "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.18"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:19:06+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73413"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:19:06+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73413"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:19:06+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73413"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:19:06+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73413"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
          "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:19:06+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73413"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x",
            "Red Hat Container Native Virtualization 4.18:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.