RHSA-2026:85980
Vulnerability from csaf_redhat - Published: 2026-10-20 13:23 - Updated: 2026-10-29 22:14Summary
Red Hat Security Advisory: Red Hat Quay 3.18.2
Severity
Important
Notes
Topic: A new version of Red Hat Quay is now available.
Details: Red Hat Quay
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-102994
Known not affected
27 products, the same list as for
CVE-2026-102994
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Red Hat Quay is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Quay",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:85980",
"url": "https://access.redhat.com/errata/RHSA-2026:85980"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102994",
"url": "https://access.redhat.com/security/cve/CVE-2026-102994"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102998",
"url": "https://access.redhat.com/security/cve/CVE-2026-102998"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85980.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.18.2",
"tracking": {
"current_release_date": "2026-10-29T22:14:21+00:00",
"generator": {
"date": "2026-10-29T22:14:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.3"
}
},
"id": "RHSA-2026:85980",
"initial_release_date": "2026-10-20T13:23:17+00:00",
"revision_history": [
{
"date": "2026-10-20T13:23:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-28T18:02:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-29T22:14:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.18",
"product": {
"name": "Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3Aeb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1791846150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1791846836"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791846163"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1791846837"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Ac6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792027151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Afeb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791854911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791846185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3Af7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792172291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aa599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1792178950"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792172715"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3A9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1791846150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791846163"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792027151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ae659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791854911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791846185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3Aa5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792172291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Ad636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792172715"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3A0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1791846150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3Ae09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791846163"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792027151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791854911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Af5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791846185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3Afcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792172291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792172715"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3Aba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1791846150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791846163"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792027151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791854911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791846185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3Ad6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792172291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792172715"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64 as a component of Red Hat Quay 3.18",
"product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64",
"relates_to_product_reference": "Red Hat Quay 3.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-102994",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-09-30T20:11:27.869277+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2544270"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact flaw can make a Red Hat service unavailable when pypdf parses a crafted PDF with excessively long indirect-object tokens.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102994"
},
{
"category": "external",
"summary": "RHBZ#2544270",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544270"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102994"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e",
"url": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/pull/4055",
"url": "https://github.com/py-pdf/pypdf/pull/4055"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0",
"url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246",
"url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246"
}
],
"release_date": "2026-09-30T19:57:37.810000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T13:23:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:85980"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files"
},
{
"cve": "CVE-2026-102998",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-09-30T20:32:15.895525+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2544283"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pypdf: pypdf: Denial of Service via crafted PDF form fields",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact flaw can exhaust resources when a Red Hat product uses pypdf to flatten form fields in a crafted PDF; ordinary PDF reading does not trigger it.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102998"
},
{
"category": "external",
"summary": "RHBZ#2544283",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544283"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102998",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102998"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7",
"url": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/pull/4087",
"url": "https://github.com/py-pdf/pypdf/pull/4087"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
"url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj",
"url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj"
}
],
"release_date": "2026-09-30T20:09:13.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T13:23:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:85980"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3_arm64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c_amd64",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74_s390x",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c_ppc64le",
"Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pypdf: pypdf: Denial of Service via crafted PDF form fields"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.