RHSA-2026:75863
Vulnerability from csaf_redhat - Published: 2026-10-05 13:20 - Updated: 2026-10-06 01:00Summary
Red Hat Security Advisory: OpenShift Virtualization v4.21 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.21 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64 | — |
Threats
Impact
Important
A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-56858
Known not affected
21 products, the same list as for
CVE-2026-56858
Threats
Impact
Important
A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-56858
Known not affected
21 products, the same list as for
CVE-2026-56858
Threats
Impact
Important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.21 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:75863",
"url": "https://access.redhat.com/errata/RHSA-2026:75863"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75863.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.21 Images",
"tracking": {
"current_release_date": "2026-10-06T01:00:18+00:00",
"generator": {
"date": "2026-10-06T01:00:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:75863",
"initial_release_date": "2026-10-05T13:20:57+00:00",
"revision_history": [
{
"date": "2026-10-05T13:20:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-05T13:21:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-06T01:00:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.21",
"product": {
"name": "Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.21::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bridge-marker-rhel9@sha256%3Adcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9\u0026tag=1790765099"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3A01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9\u0026tag=1790765278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3Ad00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9\u0026tag=1790765233"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubemacpool-rhel9@sha256%3Abe1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9\u0026tag=1790765265"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3A817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9\u0026tag=1790765278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-ipam-controller-rhel9@sha256%3A97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9\u0026tag=1790765248"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3Ab6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9\u0026tag=1790765263"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3Ac004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9\u0026tag=1790765317"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"product_identification_helper": {
"purl": "pkg:oci/bridge-marker-rhel9@sha256%3Aed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9\u0026tag=1790765099"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3Af10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9\u0026tag=1790765278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3A314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9\u0026tag=1790765233"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kubemacpool-rhel9@sha256%3A7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9\u0026tag=1790765265"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3A3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9\u0026tag=1790765278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-ipam-controller-rhel9@sha256%3A7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9\u0026tag=1790765248"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3A51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9\u0026tag=1790765263"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3Af85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9\u0026tag=1790765317"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/bridge-marker-rhel9@sha256%3Ae4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9\u0026tag=1790765099"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3A46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9\u0026tag=1790765278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3A7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9\u0026tag=1790765233"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kubemacpool-rhel9@sha256%3A15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9\u0026tag=1790765265"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3A738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9\u0026tag=1790765278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-ipam-controller-rhel9@sha256%3Af4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9\u0026tag=1790765248"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3A80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9\u0026tag=1790765263"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3Acc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9\u0026tag=1790765317"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T13:20:57+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75863"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T13:20:57+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75863"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T13:20:57+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75863"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…