RHSA-2026:88203
Vulnerability from csaf_redhat - Published: 2026-10-22 12:33 - Updated: 2026-10-23 05:27Summary
Red Hat Security Advisory: Red Hat Connectivity Link component - rhcl-operator
Severity
Important
Notes
Topic: New rhcl-1/wasm-shim-rhel9, rhcl-1/rhcl-console-plugin, rhcl-1/rhcl-operator and rhcl-1/rhcl-operator-bundle container images are now available in the Red Hat container registry.
Details: This release includes a security update for Red Hat Connectivity Link 1.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) here: https://access.redhat.com/security/updates/classification/ This adds the rhcl-1/wasm-shim-rhel9, rhcl-1/rhcl-console-plugin, rhcl-1/rhcl-operator and rhcl-1/rhcl-operator-bundle container images to the Red Hat container registry. To pull this container image, run the following command: podman pull registry.redhat.io/rhcl-1/rhcl-rhel9-operator
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create or modify an HTTPRoute attached to a shared Gateway can provide a crafted path, header, or query match value that causes the predicate to skip those checks. The request is still forwarded to the route’s backend.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x | — |
Workaround
|
Threats
Impact
Important
References
11 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "New rhcl-1/wasm-shim-rhel9, rhcl-1/rhcl-console-plugin, rhcl-1/rhcl-operator and rhcl-1/rhcl-operator-bundle container images are now available in the Red Hat container registry.",
"title": "Topic"
},
{
"category": "general",
"text": "This release includes a security update for Red Hat Connectivity Link 1.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) here: https://access.redhat.com/security/updates/classification/ This adds the rhcl-1/wasm-shim-rhel9, rhcl-1/rhcl-console-plugin, rhcl-1/rhcl-operator and rhcl-1/rhcl-operator-bundle container images to the Red Hat container registry. To pull this container image, run the following command: podman pull registry.redhat.io/rhcl-1/rhcl-rhel9-operator",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:88203",
"url": "https://access.redhat.com/errata/RHSA-2026:88203"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-108334",
"url": "https://access.redhat.com/security/cve/CVE-2026-108334"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/software/containers/search",
"url": "https://catalog.redhat.com/software/containers/search"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88203.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Connectivity Link component - rhcl-operator",
"tracking": {
"current_release_date": "2026-10-23T05:27:29+00:00",
"generator": {
"date": "2026-10-23T05:27:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:88203",
"initial_release_date": "2026-10-22T12:33:06+00:00",
"revision_history": [
{
"date": "2026-10-22T12:33:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-22T12:33:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-23T05:27:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Connectivity Link 1.5",
"product": {
"name": "Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:connectivity_link:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Connectivity Link"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"product": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"product_id": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/developer-portal-controller-rhel9@sha256%3Aaf5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8?arch=amd64\u0026repository_url=registry.redhat.io/rhcl-1/developer-portal-controller-rhel9\u0026tag=1792214622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3Ad16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e?arch=amd64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791815242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3A9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485?arch=amd64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791370345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3A107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e?arch=amd64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1790608789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-rhel9-operator@sha256%3Afa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059?arch=amd64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-rhel9-operator\u0026tag=1792512519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-operator-bundle@sha256%3A2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4?arch=amd64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-operator-bundle\u0026tag=1792513776"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"product": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"product_id": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/wasm-shim-rhel9@sha256%3A75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d?arch=amd64\u0026repository_url=registry.redhat.io/rhcl-1/wasm-shim-rhel9\u0026tag=1792456219"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"product": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"product_id": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"product_identification_helper": {
"purl": "pkg:oci/developer-portal-controller-rhel9@sha256%3A7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81?arch=arm64\u0026repository_url=registry.redhat.io/rhcl-1/developer-portal-controller-rhel9\u0026tag=1792214622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3Aa080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c?arch=arm64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791815242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3Aa9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c?arch=arm64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791370345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3A253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e?arch=arm64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1790608789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"product_id": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-rhel9-operator@sha256%3A079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82?arch=arm64\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-rhel9-operator\u0026tag=1792512519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"product": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"product_id": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"product_identification_helper": {
"purl": "pkg:oci/wasm-shim-rhel9@sha256%3A94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112?arch=arm64\u0026repository_url=registry.redhat.io/rhcl-1/wasm-shim-rhel9\u0026tag=1792456219"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"product": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"product_id": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/developer-portal-controller-rhel9@sha256%3Ac0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f?arch=ppc64le\u0026repository_url=registry.redhat.io/rhcl-1/developer-portal-controller-rhel9\u0026tag=1792214622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3Ab0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791815242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3Ad6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866?arch=ppc64le\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791370345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3Ad9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27?arch=ppc64le\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1790608789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"product_id": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-rhel9-operator@sha256%3Abb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572?arch=ppc64le\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-rhel9-operator\u0026tag=1792512519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"product": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"product_id": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/wasm-shim-rhel9@sha256%3A7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318?arch=ppc64le\u0026repository_url=registry.redhat.io/rhcl-1/wasm-shim-rhel9\u0026tag=1792456219"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"product": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"product_id": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/developer-portal-controller-rhel9@sha256%3Aef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d?arch=s390x\u0026repository_url=registry.redhat.io/rhcl-1/developer-portal-controller-rhel9\u0026tag=1792214622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3A6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796?arch=s390x\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791815242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3A846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497?arch=s390x\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1791370345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"product_id": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-console-plugin-rhel9@sha256%3A7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a?arch=s390x\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9\u0026tag=1790608789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"product": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"product_id": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhcl-rhel9-operator@sha256%3A97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73?arch=s390x\u0026repository_url=registry.redhat.io/rhcl-1/rhcl-rhel9-operator\u0026tag=1792512519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x",
"product": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x",
"product_id": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/wasm-shim-rhel9@sha256%3Afdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e?arch=s390x\u0026repository_url=registry.redhat.io/rhcl-1/wasm-shim-rhel9\u0026tag=1792456219"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64"
},
"product_reference": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64"
},
"product_reference": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le"
},
"product_reference": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x"
},
"product_reference": "registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64"
},
"product_reference": "registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64"
},
"product_reference": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le"
},
"product_reference": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64 as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64"
},
"product_reference": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x as a component of Red Hat Connectivity Link 1.5",
"product_id": "Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x"
},
"product_reference": "registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x",
"relates_to_product_reference": "Red Hat Connectivity Link 1.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-108334",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-10-01T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create or modify an HTTPRoute attached to a shared Gateway can provide a crafted path, header, or query match value that causes the predicate to skip those checks. The request is still forwarded to the route\u2019s backend.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: Crafted HTTPRoute match values can bypass Gateway policy overrides",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A tenant user with permission to write HTTPRoutes can bypass provider-enforced Gateway authentication and rate limiting for a route they control, even when those policies are configured as mandatory overrides. This can expose that tenant\u2019s protected application endpoints to requests that bypass Gateway authentication and allow traffic beyond the configured rate limit. The described impact is limited to the route writer\u2019s tenant; it does not allow one tenant \nto affect another tenant\u2019s routes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64"
],
"known_not_affected": [
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-108334"
},
{
"category": "external",
"summary": "RHBZ#2548768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-108334",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-108334"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-108334",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108334"
},
{
"category": "external",
"summary": "https://github.com/Kuadrant/kuadrant-operator/commit/7e667dc216e6ad38feaeadb391da59aa0380057a",
"url": "https://github.com/Kuadrant/kuadrant-operator/commit/7e667dc216e6ad38feaeadb391da59aa0380057a"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-fcw2-f6v9-6ffp",
"url": "https://github.com/advisories/GHSA-fcw2-f6v9-6ffp"
}
],
"release_date": "2026-10-15T16:53:51.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T12:33:06+00:00",
"details": "Red Hat Connectivity Link simplifies, secures, and manages application traffic across hybrid and multicloud environments. Consolidate multiple networking functions into a single integrated platform and extend the Gateway API through policies to apply advanced security and rate limiting across clusters. See the documentation to install Red Hat Connectivity Link at https://docs.redhat.com/en/documentation/red_hat_connectivity_link/latest.",
"product_ids": [
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88203"
},
{
"category": "workaround",
"details": "Until a fixed release is available, restrict HTTPRoute creation and modification for routes attached to the shared Gateway, and review or remove routes with match values that trigger the predicate injection. Where possible, enforce authentication and rate limiting at the backend as additional controls. An admission policy could reject confirmed exploit patterns, but validate it against legitimate routes; Gateway API match values can contain special characters. These measures reduce exposure but do not fix the shim. The backend and admission-policy measures are compensating controls; their effectiveness depends on the deployment and the specific route behavior",
"product_ids": [
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:7b383fd2884d0026135e110ea28720c41caa50d259e217ba02106d1de72abf81_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:af5b9e3302e342e9162d8e08557e50f0d9457d63547be124014b25f149ce83b8_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:c0a42d1775487d8d2806899ee03e25cada3941bb319b999e1a327714082f278f_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:ef12486812b4798d9169b83d99d66f77484037a6f7c3c9ea94805cf675e94b4d_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:107bc1fa16b3b171c2c4b25e823b45114eff39110317c82c236a3e12a1a6e77e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:253aff8391cf97d41c1216eb90ab7a2cea0d6a82aeef0cd197cc49877008cd4e_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:6c8b80cdcbd2bf837be19f3ab2a4da3065a71ba0dcb5ee68dc3f39a4b6f05796_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:7bf1e63aeab9c67c766727c81ba44a07fcc9d9951dad84cc66ffc39f09e4314a_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:846218da759186a2d77f905201e5aca14e11059aeded2d73a682d99c7ec79497_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:9829dbf8dc225d3a745d809c82ca667dd1979f47e3ac08d4499e4292c265f485_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a080526b12ce842a69a22b91926c46ce72ff3ccef0522b546bc0de8a6294997c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:a9e5ac494a7f97f640928d649b19acec15111c3dc359f974ed220d666a5ea63c_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:b0e4ded016233f2b6c2d5fc14259e5ba87c54cf579a559d8dc9fa40fe224485d_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d16d09e2e0ac96631967cc699443b4fbe611ecd1c7675363e5ebe71494cf9b7e_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d6e7f39d78270dee2f7cc69995da830365fba441e469aa81ef960d6249721866_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:d9e5b505cbc6e4a96f663e128a5da9649534c25080996c8e7bd5bcbe0c80ac27_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-operator-bundle@sha256:2ccdc9f29cfa8a6c6ba4c69d0ce96a0c3809ef98cbcfec1cad579186843671d4_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:079db62873d375400cef503c275ddbba966f2267460e4d04bf7fd2b2a479cb82_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:97b3700e72a95a902336a442927fb03ed3aacc35d188b47cb2247c3541460f73_s390x",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:bb58ff65b8e3b1c580e8939d2801208d7951e83913d4febfaef43bb5a10f9572_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:fa08ef2fa0bead309560f4c7fcb3943c9d1bafeb55da7ec8e41c2049a4abb059_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:75f4d499325e94ef623d3d3244bda210b252d88ced3e3c146da7a6a660f4539d_amd64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:7dc21cb9ee023be52d7d187945c39d09c94843d42bff3f0d6bea17380a220318_ppc64le",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:94d0460dd51cac143c75cd04b9c21843271be5e5d4946c995d4a7e49a1b43112_arm64",
"Red Hat Connectivity Link 1.5:registry.redhat.io/rhcl-1/wasm-shim-rhel9@sha256:fdfc6038aaae06c840a4c835cca7fe65fb212c1516cffe98cc906de7805a620e_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: Crafted HTTPRoute match values can bypass Gateway policy overrides"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.