Vulnerability-Lookup

RHSA-2026:89041

Vulnerability from csaf_redhat - Published: 2026-10-24 08:11 - Updated: 2026-10-26 17:58

Summary

Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2

Severity

Important

Notes

Topic: Red Hat OpenShift Builds 1.9.2

Details: Release of Red Hat OpenShift Builds 1.9.2

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64	—	Vendor Fix fix Workaround

Known not affected 32 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x	—	Workaround

Threats

Impact Important

CVE-2026-39821

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-40161

A flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoint, the system-configured Git API token (such as a GitHub Personal Access Token or GitLab token) can be sent to the attacker. This information disclosure allows for the exfiltration of sensitive API tokens.

7.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Moderate

CVE-2026-40938

A flaw was found in Tekton Pipelines, a system for declaring continuous integration/continuous delivery (CI/CD) pipelines. An authenticated user, able to submit `ResolutionRequest` objects, can exploit a vulnerability by injecting malicious commands into the git resolver's revision parameter. This allows for the execution of unauthorized programs on the resolver pod. Successful exploitation can lead to the exfiltration of all cluster-wide secrets, resulting in significant information disclosure.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-46600

A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 13 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le	—	Vendor Fix fix

Known not affected 24 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x		—

Threats

Impact Important

CVE-2026-56851

A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service (DoS) by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing the application to panic and crash.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le	—	Vendor Fix fix

Known not affected 29 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x		—

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-78667

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 37 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-78669

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 37 products, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-84304

A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 5 products, the same list as for CVE-2026-33818

Known not affected 32 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 37 products, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-97031

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 37 products, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-111943

A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 37 products, the same list as for CVE-2026-78667

Threats

Impact Important

References

153 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:89041	self
https://access.redhat.com/security/cve/CVE-2026-111943	external
https://access.redhat.com/security/cve/CVE-2026-33818	external
https://access.redhat.com/security/cve/CVE-2026-39821	external
https://access.redhat.com/security/cve/CVE-2026-40161	external
https://access.redhat.com/security/cve/CVE-2026-40938	external
https://access.redhat.com/security/cve/CVE-2026-46600	external
https://access.redhat.com/security/cve/CVE-2026-56851	external
https://access.redhat.com/security/cve/CVE-2026-56853	external
https://access.redhat.com/security/cve/CVE-2026-56858	external
https://access.redhat.com/security/cve/CVE-2026-56859	external
https://access.redhat.com/security/cve/CVE-2026-56860	external
https://access.redhat.com/security/cve/CVE-2026-56862	external
https://access.redhat.com/security/cve/CVE-2026-78667	external
https://access.redhat.com/security/cve/CVE-2026-78669	external
https://access.redhat.com/security/cve/CVE-2026-84304	external
https://access.redhat.com/security/cve/CVE-2026-84445	external
https://access.redhat.com/security/cve/CVE-2026-97031	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://www.cve.org/CVERecord?id=CVE-2026-33818	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818	external
https://go.dev/cl/814980	external
https://go.dev/issue/80405	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-5972	external
https://access.redhat.com/security/cve/CVE-2026-39821	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	external
https://www.cve.org/CVERecord?id=CVE-2026-39821	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821	external
https://go.dev/cl/767220	external
https://go.dev/issue/78760	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5026	external
https://access.redhat.com/security/cve/CVE-2026-40161	self
https://bugzilla.redhat.com/show_bug.cgi?id=2460173	external
https://www.cve.org/CVERecord?id=CVE-2026-40161	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40161	external
https://github.com/tektoncd/pipeline/issues/9608	external
https://github.com/tektoncd/pipeline/issues/9609	external
https://github.com/tektoncd/pipeline/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-40938	self
https://bugzilla.redhat.com/show_bug.cgi?id=2460292	external
https://www.cve.org/CVERecord?id=CVE-2026-40938	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40938	external
https://github.com/tektoncd/pipeline/releases/tag…	external
https://github.com/tektoncd/pipeline/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-46600	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504234	external
https://www.cve.org/CVERecord?id=CVE-2026-46600	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46600	external
https://go.dev/cl/786345	external
https://go.dev/issue/79795	external
https://pkg.go.dev/vuln/GO-2026-5942	external
https://access.redhat.com/security/cve/CVE-2026-56851	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547607	external
https://www.cve.org/CVERecord?id=CVE-2026-56851	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56851	external
https://go.dev/cl/793360	external
https://go.dev/issue/80112	external
https://pkg.go.dev/vuln/GO-2026-6629	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-78667	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548334	external
https://www.cve.org/CVERecord?id=CVE-2026-78667	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78667	external
https://go.dev/cl/847309	external
https://go.dev/issue/81858	external
https://groups.google.com/g/golang-announce/c/U2f…	external
https://pkg.go.dev/vuln/GO-2026-6609	external
https://access.redhat.com/security/cve/CVE-2026-78669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548344	external
https://www.cve.org/CVERecord?id=CVE-2026-78669	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78669	external
https://go.dev/cl/847186	external
https://go.dev/cl/847308	external
https://go.dev/issue/81742	external
https://groups.google.com/g/golang-announce/c/ZPw…	external
https://pkg.go.dev/vuln/GO-2026-6611	external
https://access.redhat.com/security/cve/CVE-2026-84304	self
https://bugzilla.redhat.com/show_bug.cgi?id=2526955	external
https://www.cve.org/CVERecord?id=CVE-2026-84304	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84304	external
https://github.com/grpc/grpc-go/commit/7354d9c8de…	external
https://github.com/grpc/grpc-go/commit/8cfeca0e1e…	external
https://github.com/grpc/grpc-go/pull/9331	external
https://github.com/grpc/grpc-go/pull/9333	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.1	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-84445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175	external
https://www.cve.org/CVERecord?id=CVE-2026-84445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445	external
https://github.com/grpc/grpc-go/commit/3822494d8e…	external
https://github.com/grpc/grpc-go/commit/8668b69c16…	external
https://github.com/grpc/grpc-go/commit/93e31b4854…	external
https://github.com/grpc/grpc-go/issues/9354	external
https://github.com/grpc/grpc-go/pull/9365	external
https://github.com/grpc/grpc-go/pull/9366	external
https://github.com/grpc/grpc-go/pull/9367	external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-97031	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548336	external
https://www.cve.org/CVERecord?id=CVE-2026-97031	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97031	external
https://go.dev/cl/847312	external
https://go.dev/issue/81855	external
https://pkg.go.dev/vuln/GO-2026-6607	external
https://access.redhat.com/security/cve/CVE-2026-111943	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556068	external
https://access.redhat.com/security/vulnerabilitie…	external
https://www.cve.org/CVERecord?id=CVE-2026-111943	external
https://nvd.nist.gov/vuln/detail/CVE-2026-111943	external
https://github.com/golang/go/issues/82345	external
https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Builds 1.9.2",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Release of Red Hat OpenShift Builds 1.9.2",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:89041",
        "url": "https://access.redhat.com/errata/RHSA-2026:89041"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-111943",
        "url": "https://access.redhat.com/security/cve/CVE-2026-111943"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40161",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40161"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40938",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40938"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46600",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46600"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56851",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56851"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-78667",
        "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-78669",
        "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84304",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84304"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97031",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89041.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2",
    "tracking": {
      "current_release_date": "2026-10-26T17:58:57+00:00",
      "generator": {
        "date": "2026-10-26T17:58:57+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:89041",
      "initial_release_date": "2026-10-24T08:11:53+00:00",
      "revision_history": [
        {
          "date": "2026-10-24T08:11:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-24T08:11:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-26T17:58:57+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Builds 1.9.2",
                "product": {
                  "name": "Red Hat OpenShift Builds 1.9.2",
                  "product_id": "Red Hat OpenShift Builds 1.9.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_builds:1.9::el10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Builds"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3Ab1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792680723"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3Af70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792762055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3A4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792680848"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3A86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792680911"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3A78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792749358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle\u0026tag=1792762900"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3A91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792680549"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3A119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792680546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3Afec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792762119"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3Aa4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792680944"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3A11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792680723"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3A84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792762055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3Af803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792680848"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3Ada3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792680911"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3Af7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792749358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3A356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792680549"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3Ab6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792680546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3A8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792762119"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3A5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792680944"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3A7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792680723"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3Aca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792762055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3Acfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792680848"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3A141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792680911"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3A042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792749358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3Ab3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792680549"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3Abb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792680546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3A17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792762119"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3Ae803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792680944"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3A664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792680723"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3A137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792762055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3A573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792680848"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3A497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792680911"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3Ac4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792749358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3Aef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792680549"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3A2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792680546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3Ad62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792762119"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3Afa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792680944"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-40161",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-04-21T17:02:07.015859+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460173"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoint, the system-configured Git API token (such as a GitHub Personal Access Token or GitLab token) can be sent to the attacker. This information disclosure allows for the exfiltration of sensitive API tokens.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact information disclosure flaw affects Tekton Pipelines. A user with permissions to create TaskRun or PipelineRun resources could exfiltrate the system-configured Git API token by directing the serverURL to an attacker-controlled endpoint and omitting the token parameter. This vulnerability doesn\u0027t affect a couple of Red Hat supported products as it\u0027s using a Pipelines version previously from 1.0.0, where the affected code is not present.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460173",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460173"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40161",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40161",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/issues/9608",
          "url": "https://github.com/tektoncd/pipeline/issues/9608"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/issues/9609",
          "url": "https://github.com/tektoncd/pipeline/issues/9609"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff",
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff"
        }
      ],
      "release_date": "2026-04-21T16:26:27.381000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that the Git API token parameter is always explicitly provided when configuring Tekton Pipelines. Additionally, restrict permissions for creating TaskRun or PipelineRun resources to only trusted users to limit the attack surface. Review and enforce policies that prevent the use of user-controlled serverURLs without proper token authentication. Configuration changes may require a restart or reload of affected services to take effect.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL"
    },
    {
      "cve": "CVE-2026-40938",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-21T21:02:16.557479+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460292"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tekton Pipelines, a system for declaring continuous integration/continuous delivery (CI/CD) pipelines. An authenticated user, able to submit `ResolutionRequest` objects, can exploit a vulnerability by injecting malicious commands into the git resolver\u0027s revision parameter. This allows for the execution of unauthorized programs on the resolver pod. Successful exploitation can lead to the exfiltration of all cluster-wide secrets, resulting in significant information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Tekton Pipelines allows an authenticated user to achieve arbitrary code execution on the resolver pod by injecting malicious commands into the git resolver\u0027s revision parameter. This vulnerability happens because the `revision` parameter is passed as a positional argument to the `git fetch` command without any previous validation whether the parameter\u0027s value doesn\u0027t start with `-` character. Combining this lack of validation with the fact the function which validates the repository URL explicitly allows a repository URL to being with `/`, translating to a local filesystem. An attacker with enough privileges to perform an operation which trigger resolvers to use the `ResolutionRequest` function can \nchain both behaviors to trick Tekton Pipelines to load and execute an arbitrary binary on the resolver pod.\n\nExploring this vulnerability may be considered of a high complexity as an attacker needs to either know an existing valid git repository located at a predicable path already in the resolver pod or a default URL configuration pointing to a local filesystem\u0027s path.\n \nA successful exploitation of the flaw can lead to the exfiltration of all cluster-wide secrets, posing a significant risk to the integrity and confidentiality of the OpenShift environment. Additionally, depending on the data included in the `kubeconfig` files, an attacker may achieve privilege escalation or perform lateral movements within the targeted cluster.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460292",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460292"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40938",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40938",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1",
          "url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq",
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
        }
      ],
      "release_date": "2026-04-21T20:45:24.658000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands"
    },
    {
      "cve": "CVE-2026-46600",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:59.038876+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504234"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504234",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504234"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/786345",
          "url": "https://go.dev/cl/786345"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79795",
          "url": "https://go.dev/issue/79795"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5942",
          "url": "https://pkg.go.dev/vuln/GO-2026-5942"
        }
      ],
      "release_date": "2026-07-21T19:18:59.755000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing"
    },
    {
      "cve": "CVE-2026-56851",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-07T18:01:23.622132+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547607"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service (DoS) by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing the application to panic and crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547607",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547607"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/793360",
          "url": "https://go.dev/cl/793360"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80112",
          "url": "https://go.dev/issue/80112"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6629",
          "url": "https://pkg.go.dev/vuln/GO-2026-6629"
        }
      ],
      "release_date": "2026-10-07T17:46:35.620000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-78667",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:51.418048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548334"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity for Red Hat products because an unauthenticated remote attacker can exhaust server compute resources over the network, leading to a complete service outage. Across Red Hat enterprise environments, Go is widely deployed in container runtimes, monitoring daemons, and OpenShift infrastructure components. However, exploitation is restricted to applications that actively listen on the network and serve content using standard library HTTP handlers that process multi-range requests. CLI utilities and server components that do not handle byte-range requests from untrusted clients remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548334",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78667",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847309",
          "url": "https://go.dev/cl/847309"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81858",
          "url": "https://go.dev/issue/81858"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6609",
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "release_date": "2026-10-08T22:53:59.148000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers"
    },
    {
      "cve": "CVE-2026-78669",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:01:28.964317+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go net/http package and the golang.org/x/net/http2 module. A malicious HTTP/2 peer can cause excessive CPU consumption by opening a large number of HTTP/2 streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. Each SETTINGS frame forces the server or client to iterate over all open streams to adjust their flow-control windows, resulting in quadratic CPU usage and denial of service.\n\nThis vulnerability affects all Go programs that serve or consume HTTP/2 traffic using net/http or golang.org/x/net/http2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847186",
          "url": "https://go.dev/cl/847186"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847308",
          "url": "https://go.dev/cl/847308"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81742",
          "url": "https://go.dev/issue/81742"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs",
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6611",
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "release_date": "2026-10-08T22:53:59.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "In case you consume HTTP2, upgrade to a patched version of the http module.\n\nVerify:\n```\ngo version\ngo list -m golang.org/x/net\ngovulncheck ./...\n```",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
    },
    {
      "cve": "CVE-2026-84304",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-01T18:41:15.538515+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2526955"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84304"
        },
        {
          "category": "external",
          "summary": "RHBZ#2526955",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526955"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84304"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176",
          "url": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77",
          "url": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9331",
          "url": "https://github.com/grpc/grpc-go/pull/9331"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9333",
          "url": "https://github.com/grpc/grpc-go/pull/9333"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc"
        }
      ],
      "release_date": "2026-09-01T18:19:10.100000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    },
    {
      "cve": "CVE-2026-97031",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:59.284728+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can trigger memory exhaustion and crash server processes without requiring privileges or user interaction. Go applications that terminate TLS connections and accept Encrypted Client Hello configurations are vulnerable to resource amplification during the initial handshake. While the flaw does not facilitate arbitrary code execution or compromise data confidentiality, the resulting denial of service can disrupt critical network services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847312",
          "url": "https://go.dev/cl/847312"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81855",
          "url": "https://go.dev/issue/81855"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6607",
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "release_date": "2026-10-08T22:53:58.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references"
    },
    {
      "cve": "CVE-2026-111943",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-20T09:38:36.160000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556068"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important because Go applications validating TLS certificates could accept unauthorized certificates issued by distrusted intermediate Certificate Authorities, potentially compromising the integrity and confidentiality of secure network communications. Any Go-based client or server relying on standard certificate verification may be exposed to man-in-the-middle attacks if an attacker intercepts traffic using certificates derived from these intermediate keys. Exploitation requires specific network positioning and certificates generated by the untrusted intermediate authorities, limiting opportunistic widespread abuse.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556068",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556068"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-012",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-111943",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/go/issues/82345",
          "url": "https://github.com/golang/go/issues/82345"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU",
          "url": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU"
        }
      ],
      "release_date": "2026-10-20T02:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T08:11:53+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89041"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:11595df2854c583037aff11fd43bd5900731fd6aa0cd16288d7ee69960f09dc8_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:664406223fda9e03aadab2113439cfd50380cc7bc42153057274146497445675_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:7ee345785101f6714e2026f10dde07c516c6f1ec8cd4779fe808db8b2490ea9b_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:b1a629c643fd4bd2b08ef3fd2a9455164ea7333a2ffce5e90d4ff9852a14e136_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:137e489111f5f667706e3aff6ae009b76413941885e57dfac7a7745f07f48d0d_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:84540b45322762a2510d898b42e02ccd66f47b9a5b655b4a5da8fe9004c6c59b_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:ca6fb8f4c0e4484e36be5b41aca2131d4d7ac4ffaf1d4d82c99656c83fe7a35e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:f70fda57679df64bd440d37c1adfaf171d79cf1a4f1819e9abac0eb29e65a1f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4d872f99022f47a0db5ad1137921c7b34c72f285d2b9c645840322d49a3c90a3_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:573bdfe5014404ecff08105c5ffb58e91e0a788a04966eb970f4847710a54864_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:cfa90c56d2573803576e0b6678e03bb9a6cfee8a582bbbe158c35bd3e562961e_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f803eb0c6cee0f2773e69985ccbe15272f74438a860d71d0b18887308f9566cd_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:141f9e7db0369f613bc539aa483c24719feb8b5481fbc6dfe881736afc43dcaa_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:497295e69e436831b2014d8929d5ecf4711cae95f27048710732285963ca75df_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:86da529c8ed04f6870bd0ad3d49f665f6e0c8a865a5adaf002622c8e726651c7_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:da3584c6fb7821d929c556f037e559974ac89487b1575be5d45627f5fc29a205_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:373dc38d83d560b3a3b35f0fa4865826bcd19bebe735e48aec5141b826ab2b7b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:042fbf2da45fff01deae9a6032515f3d97f158ee6d0b0537aed30931c0631d07_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:78bfd3e4ff55b973f808004c33b22258967b6d1434ea1dd86f3acd9d423ccbcd_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:c4d36d430d9fbfb19bcc9c10c55ee477d9308d5f57dc81eab8762a127d35d80e_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f7a274fba60644bc3ca2de506140a6dca598b12a64b9463542cb6e118d2f2f30_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:356261cd64e02387bdc88ee6f3b415b4c74f8a29e3e2fa4466ce12773b5c4240_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:91d61aa8fbc4f3a0dde99430110c135873c60fa9fae84da28d15f0611396151b_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:b3938cb6923482786daa1a39394f468ba635a8ede7132860055bf2775e49985f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ef2aaa078f2b49f54998ce06ee3cc2fc0b8dbc8d498b6dd2a0f48723aaf50a2f_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:119c1854387e584849f48dd4d9f67be23e3d1940cf44f22c0efe66628253a86e_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:2032f6d8c358812ff60eafa9032de35f5a5b6070f090eaead666561ed8beb22a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:b6e2a3e37df8b466bf1e22948e1bc17bbc62257384aac71cf01eaf480a444341_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:bb5d865c64a8d71b11f08b1d658f01b554732121be010b8682ef81c4d39638bd_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:17eaff2f600d0203b71d04236daa8969d7c3e2913f42c98efd45d14279f22d9c_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:8041addd51726dfa89af5f084798e6430d94f86dc2075680b6f8e6e7b14070e2_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:d62a5dfc6cac1c0f592874efc3cf7a0928f8902cd2c7801f5b1376ccab135d58_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:fec7f38b48529285a873e186c1bd7b1a5adbf0cc67184e5432addb2eeb98c292_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:5264f75516a9bc91de982e483566c0882cf22cf2f028c7460c9c9995f2606e45_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a4cc73b7e5d4df2ce7433ad4140c8180a543c5eecb03f87a1eb172eb9cce9634_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:e803a087123fc359072dcf2fe3cc962531dc397700430a9166c0c799a90f15d1_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:fa80ab11b0579deb0ce65b4d86ab0dd8a06a314c9861017dd62a8c8bfac2b369_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates"
    }
  ]
}

CVE-2026-56860 (GCVE-0-2026-56860)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 16:14

Title

Avoid quadratic complexity in resolvePath in net/url

Summary

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 16:14 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/803681
https://go.dev/issue/80494
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6218

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/url	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T16:14:34.601382Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-407",
                "description": "CWE-407 Inefficient Algorithmic Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T16:14:39.166Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/url",
          "product": "net/url",
          "programRoutines": [
            {
              "name": "resolvePath"
            },
            {
              "name": "URL.Parse"
            },
            {
              "name": "URL.ResolveReference"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, resolving relative paths containing parent directory (\u0027..\u0027) segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for \u0027..\u0027 segments, eliminating the quadratic time complexity and significantly reducing memory allocations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.731Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/803681"
        },
        {
          "url": "https://go.dev/issue/80494"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "title": "Avoid quadratic complexity in resolvePath in net/url"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56860",
    "datePublished": "2026-08-13T21:58:53.731Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T16:14:39.166Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56862 (GCVE-0-2026-56862)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:29

Title

Limit handshake messages we are willing to accept post-handshake in crypto/tls

Summary

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:27 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/80528
https://go.dev/cl/804261
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6090

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Qi Deng of Aurascape.ai

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56862",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:27:34.651997Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:29:41.741Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "Conn.readRecordOrCCS"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.HandleData"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Qi Deng of Aurascape.ai"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.216Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80528"
        },
        {
          "url": "https://go.dev/cl/804261"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "title": "Limit handshake messages we are willing to accept post-handshake in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56862",
    "datePublished": "2026-08-13T21:58:53.216Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T15:29:41.741Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-78667 (GCVE-0-2026-78667)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 16:12

Title

Lack of limit on size of parsed Range headers in net/http

Summary

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 16:12 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/847309
https://go.dev/issue/81858
https://groups.google.com/g/golang-announce/c/U2f…
https://pkg.go.dev/vuln/GO-2026-6609

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.26.9 (semver) Affected: 1.27.0-0 , < 1.27.2 (semver)

Credits

Jakub Ciolek (https://ciolek.dev)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-78667",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T16:12:49.383383Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T16:12:53.569Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "parseRange"
            },
            {
              "name": "ServeContent"
            },
            {
              "name": "ServeFile"
            },
            {
              "name": "ServeFileFS"
            },
            {
              "name": "fileHandler.ServeHTTP"
            },
            {
              "name": "fileTransport.RoundTrip"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek (https://ciolek.dev)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:59.148Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847309"
        },
        {
          "url": "https://go.dev/issue/81858"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "title": "Lack of limit on size of parsed Range headers in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-78667",
    "datePublished": "2026-10-08T22:53:59.148Z",
    "dateReserved": "2026-08-24T23:36:15.738Z",
    "dateUpdated": "2026-10-09T16:12:53.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-78669 (GCVE-0-2026-78669)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 16:32

Title

Excessive CPU consumption from repeated initial window changes in net/http

Summary

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 16:32 UTC

CWE

CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

6 references

URL	Tags
https://go.dev/cl/847186
https://go.dev/cl/847308
https://go.dev/issue/81742
https://groups.google.com/g/golang-announce/c/U2f…
https://groups.google.com/g/golang-announce/c/ZPw…
https://pkg.go.dev/vuln/GO-2026-6611

Impacted products

3 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.26.9 (semver)
Go standard library	net/http/internal/http2	Affected: 1.27.0-0 , < 1.27.2 (semver)
golang.org/x/net	golang.org/x/net/http2	Affected: 0 , < 0.60.0 (semver)

Credits

Jakub Ciolek (https://ciolek.dev)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-78669",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T16:32:53.872432Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-405",
                "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T16:32:57.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "http2outflow.add"
            },
            {
              "name": "http2outflow.available"
            },
            {
              "name": "http2outflow.setConnFlow"
            },
            {
              "name": "http2outflow.take"
            },
            {
              "name": "http2Server.serveConn"
            },
            {
              "name": "http2serverConn.newStream"
            },
            {
              "name": "http2serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "http2serverConn.processWindowUpdate"
            },
            {
              "name": "http2serverConn.scheduleFrameWrite"
            },
            {
              "name": "http2ClientConn.addStreamLocked"
            },
            {
              "name": "http2Transport.newClientConn"
            },
            {
              "name": "http2clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "http2clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "http2clientConnReadLoop.streamByID"
            },
            {
              "name": "http2clientStream.awaitFlowControl"
            },
            {
              "name": "http2clientStream.cleanupWriteRequest"
            },
            {
              "name": "http2FrameWriteRequest.Consume"
            },
            {
              "name": "CanonicalHeaderKey"
            },
            {
              "name": "Client.CloseIdleConnections"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "Cookie.String"
            },
            {
              "name": "Cookie.Valid"
            },
            {
              "name": "CrossOriginProtection.AddInsecureBypassPattern"
            },
            {
              "name": "CrossOriginProtection.AddTrustedOrigin"
            },
            {
              "name": "CrossOriginProtection.Check"
            },
            {
              "name": "Dir.Open"
            },
            {
              "name": "Error"
            },
            {
              "name": "Get"
            },
            {
              "name": "Handle"
            },
            {
              "name": "HandleFunc"
            },
            {
              "name": "HandlerFunc.ServeHTTP"
            },
            {
              "name": "Head"
            },
            {
              "name": "Header.Add"
            },
            {
              "name": "Header.Del"
            },
            {
              "name": "Header.Get"
            },
            {
              "name": "Header.Set"
            },
            {
              "name": "Header.Values"
            },
            {
              "name": "Header.Write"
            },
            {
              "name": "Header.WriteSubset"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "NewRequest"
            },
            {
              "name": "NewRequestWithContext"
            },
            {
              "name": "NotFound"
            },
            {
              "name": "ParseCookie"
            },
            {
              "name": "ParseSetCookie"
            },
            {
              "name": "ParseTime"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "ProxyFromEnvironment"
            },
            {
              "name": "ReadRequest"
            },
            {
              "name": "ReadResponse"
            },
            {
              "name": "Redirect"
            },
            {
              "name": "Request.AddCookie"
            },
            {
              "name": "Request.BasicAuth"
            },
            {
              "name": "Request.Cookie"
            },
            {
              "name": "Request.Cookies"
            },
            {
              "name": "Request.CookiesNamed"
            },
            {
              "name": "Request.FormFile"
            },
            {
              "name": "Request.FormValue"
            },
            {
              "name": "Request.MultipartReader"
            },
            {
              "name": "Request.ParseForm"
            },
            {
              "name": "Request.ParseMultipartForm"
            },
            {
              "name": "Request.PostFormValue"
            },
            {
              "name": "Request.Referer"
            },
            {
              "name": "Request.SetBasicAuth"
            },
            {
              "name": "Request.UserAgent"
            },
            {
              "name": "Request.Write"
            },
            {
              "name": "Request.WriteProxy"
            },
            {
              "name": "Response.Cookies"
            },
            {
              "name": "Response.Location"
            },
            {
              "name": "Response.Write"
            },
            {
              "name": "ResponseController.EnableFullDuplex"
            },
            {
              "name": "ResponseController.Flush"
            },
            {
              "name": "ResponseController.Hijack"
            },
            {
              "name": "ResponseController.SetReadDeadline"
            },
            {
              "name": "ResponseController.SetWriteDeadline"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeContent"
            },
            {
              "name": "ServeFile"
            },
            {
              "name": "ServeFileFS"
            },
            {
              "name": "ServeMux.Handle"
            },
            {
              "name": "ServeMux.HandleFunc"
            },
            {
              "name": "ServeMux.ServeHTTP"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.Close"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            },
            {
              "name": "Server.SetKeepAlivesEnabled"
            },
            {
              "name": "Server.Shutdown"
            },
            {
              "name": "SetCookie"
            },
            {
              "name": "Transport.CancelRequest"
            },
            {
              "name": "Transport.Clone"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "body.Close"
            },
            {
              "name": "body.Read"
            },
            {
              "name": "bodyEOFSignal.Close"
            },
            {
              "name": "bodyEOFSignal.Read"
            },
            {
              "name": "bodyLocked.Read"
            },
            {
              "name": "bufioFlushWriter.Write"
            },
            {
              "name": "cancelTimerBody.Close"
            },
            {
              "name": "cancelTimerBody.Read"
            },
            {
              "name": "checkConnErrorWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "connReader.Read"
            },
            {
              "name": "connectMethodKey.String"
            },
            {
              "name": "expectContinueReader.Close"
            },
            {
              "name": "expectContinueReader.Read"
            },
            {
              "name": "extraHeader.Write"
            },
            {
              "name": "fileHandler.ServeHTTP"
            },
            {
              "name": "fileTransport.RoundTrip"
            },
            {
              "name": "globalOptionsHandler.ServeHTTP"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "http1ClientConn.Close"
            },
            {
              "name": "http1ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.Close"
            },
            {
              "name": "http2ClientConn.Ping"
            },
            {
              "name": "http2ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.Shutdown"
            },
            {
              "name": "http2ConnectionError.Error"
            },
            {
              "name": "http2ErrCode.String"
            },
            {
              "name": "http2FrameHeader.String"
            },
            {
              "name": "http2FrameType.String"
            },
            {
              "name": "http2FrameWriteRequest.String"
            },
            {
              "name": "http2Framer.ReadFrame"
            },
            {
              "name": "http2Framer.ReadFrameForHeader"
            },
            {
              "name": "http2Framer.ReadFrameHeader"
            },
            {
              "name": "http2Framer.WriteContinuation"
            },
            {
              "name": "http2Framer.WriteData"
            },
            {
              "name": "http2Framer.WriteDataPadded"
            },
            {
              "name": "http2Framer.WriteGoAway"
            },
            {
              "name": "http2Framer.WriteHeaders"
            },
            {
              "name": "http2Framer.WritePing"
            },
            {
              "name": "http2Framer.WritePriority"
            },
            {
              "name": "http2Framer.WritePushPromise"
            },
            {
              "name": "http2Framer.WriteRSTStream"
            },
            {
              "name": "http2Framer.WriteRawFrame"
            },
            {
              "name": "http2Framer.WriteSettings"
            },
            {
              "name": "http2Framer.WriteSettingsAck"
            },
            {
              "name": "http2Framer.WriteWindowUpdate"
            },
            {
              "name": "http2GoAwayError.Error"
            },
            {
              "name": "http2Server.ServeConn"
            },
            {
              "name": "http2Setting.String"
            },
            {
              "name": "http2SettingID.String"
            },
            {
              "name": "http2SettingsFrame.ForeachSetting"
            },
            {
              "name": "http2StreamError.Error"
            },
            {
              "name": "http2Transport.CloseIdleConnections"
            },
            {
              "name": "http2Transport.NewClientConn"
            },
            {
              "name": "http2Transport.RoundTrip"
            },
            {
              "name": "http2Transport.RoundTripOpt"
            },
            {
              "name": "http2bufferedWriter.Flush"
            },
            {
              "name": "http2bufferedWriter.Write"
            },
            {
              "name": "http2bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "http2chunkWriter.Write"
            },
            {
              "name": "http2clientConnPool.GetClientConn"
            },
            {
              "name": "http2connError.Error"
            },
            {
              "name": "http2dataBuffer.Read"
            },
            {
              "name": "http2duplicatePseudoHeaderError.Error"
            },
            {
              "name": "http2gzipReader.Close"
            },
            {
              "name": "http2gzipReader.Read"
            },
            {
              "name": "http2headerFieldNameError.Error"
            },
            {
              "name": "http2headerFieldValueError.Error"
            },
            {
              "name": "http2netHTTPClientConn.Close"
            },
            {
              "name": "http2netHTTPClientConn.RoundTrip"
            },
            {
              "name": "http2noDialClientConnPool.GetClientConn"
            },
            {
              "name": "http2noDialH2RoundTripper.NewClientConn"
            },
            {
              "name": "http2noDialH2RoundTripper.RoundTrip"
            },
            {
              "name": "http2pipe.Read"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.CloseStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.OpenStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.Pop"
            },
            {
              "name": "http2priorityWriteSchedulerRFC9218.OpenStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "http2pseudoHeaderError.Error"
            },
            {
              "name": "http2randomWriteScheduler.Pop"
            },
            {
              "name": "http2requestBody.Close"
            },
            {
              "name": "http2requestBody.Read"
            },
            {
              "name": "http2responseWriter.Flush"
            },
            {
              "name": "http2responseWriter.FlushError"
            },
            {
              "name": "http2responseWriter.Push"
            },
            {
              "name": "http2responseWriter.SetReadDeadline"
            },
            {
              "name": "http2responseWriter.SetWriteDeadline"
            },
            {
              "name": "http2responseWriter.Write"
            },
            {
              "name": "http2responseWriter.WriteHeader"
            },
            {
              "name": "http2responseWriter.WriteString"
            },
            {
              "name": "http2roundRobinWriteScheduler.OpenStream"
            },
            {
              "name": "http2roundRobinWriteScheduler.Pop"
            },
            {
              "name": "http2serverConn.CloseConn"
            },
            {
              "name": "http2serverConn.Flush"
            },
            {
              "name": "http2stickyErrWriter.Write"
            },
            {
              "name": "http2transportResponseBody.Close"
            },
            {
              "name": "http2transportResponseBody.Read"
            },
            {
              "name": "http2unencryptedTransport.RoundTrip"
            },
            {
              "name": "http2writeData.String"
            },
            {
              "name": "initALPNRequest.ServeHTTP"
            },
            {
              "name": "loggingConn.Close"
            },
            {
              "name": "loggingConn.Read"
            },
            {
              "name": "loggingConn.Write"
            },
            {
              "name": "maxBytesReader.Close"
            },
            {
              "name": "maxBytesReader.Read"
            },
            {
              "name": "onceCloseListener.Close"
            },
            {
              "name": "persistConn.Read"
            },
            {
              "name": "persistConnWriter.ReadFrom"
            },
            {
              "name": "persistConnWriter.Write"
            },
            {
              "name": "populateResponse.Write"
            },
            {
              "name": "populateResponse.WriteHeader"
            },
            {
              "name": "readTrackingBody.Close"
            },
            {
              "name": "readTrackingBody.Read"
            },
            {
              "name": "readWriteCloserBody.CloseWrite"
            },
            {
              "name": "readWriteCloserBody.Read"
            },
            {
              "name": "redirectHandler.ServeHTTP"
            },
            {
              "name": "response.Flush"
            },
            {
              "name": "response.FlushError"
            },
            {
              "name": "response.Hijack"
            },
            {
              "name": "response.ReadFrom"
            },
            {
              "name": "response.Write"
            },
            {
              "name": "response.WriteHeader"
            },
            {
              "name": "response.WriteString"
            },
            {
              "name": "serverHandler.ServeHTTP"
            },
            {
              "name": "socksDialer.DialWithConn"
            },
            {
              "name": "socksUsernamePassword.Authenticate"
            },
            {
              "name": "stringWriter.WriteString"
            },
            {
              "name": "timeoutHandler.ServeHTTP"
            },
            {
              "name": "timeoutWriter.Write"
            },
            {
              "name": "timeoutWriter.WriteHeader"
            },
            {
              "name": "transportReadFromServerError.Error"
            },
            {
              "name": "unencryptedHTTP2Request.ServeHTTP"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http/internal/http2",
          "product": "net/http/internal/http2",
          "programRoutines": [
            {
              "name": "outflow.add"
            },
            {
              "name": "outflow.available"
            },
            {
              "name": "outflow.setConnFlow"
            },
            {
              "name": "outflow.take"
            },
            {
              "name": "Server.serveConn"
            },
            {
              "name": "serverConn.newStream"
            },
            {
              "name": "serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "serverConn.processWindowUpdate"
            },
            {
              "name": "serverConn.scheduleFrameWrite"
            },
            {
              "name": "ClientConn.addStreamLocked"
            },
            {
              "name": "Transport.newClientConn"
            },
            {
              "name": "clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "clientConnReadLoop.streamByID"
            },
            {
              "name": "clientStream.awaitFlowControl"
            },
            {
              "name": "clientStream.cleanupWriteRequest"
            },
            {
              "name": "FrameWriteRequest.Consume"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.Ping"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "ClientConn.Shutdown"
            },
            {
              "name": "Framer.ReadFrame"
            },
            {
              "name": "Framer.ReadFrameForHeader"
            },
            {
              "name": "Framer.ReadFrameHeader"
            },
            {
              "name": "Framer.WriteContinuation"
            },
            {
              "name": "Framer.WriteData"
            },
            {
              "name": "Framer.WriteDataPadded"
            },
            {
              "name": "Framer.WriteGoAway"
            },
            {
              "name": "Framer.WriteHeaders"
            },
            {
              "name": "Framer.WritePing"
            },
            {
              "name": "Framer.WritePriority"
            },
            {
              "name": "Framer.WritePriorityUpdate"
            },
            {
              "name": "Framer.WritePushPromise"
            },
            {
              "name": "Framer.WriteRSTStream"
            },
            {
              "name": "Framer.WriteRawFrame"
            },
            {
              "name": "Framer.WriteSettings"
            },
            {
              "name": "Framer.WriteSettingsAck"
            },
            {
              "name": "Framer.WriteWindowUpdate"
            },
            {
              "name": "NetHTTPClientConn.Close"
            },
            {
              "name": "NetHTTPClientConn.Ping"
            },
            {
              "name": "NetHTTPClientConn.RoundTrip"
            },
            {
              "name": "ReadFrameHeader"
            },
            {
              "name": "Server.GracefulShutdown"
            },
            {
              "name": "Server.ServeConn"
            },
            {
              "name": "SettingsFrame.ForeachSetting"
            },
            {
              "name": "Transport.AddConn"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            },
            {
              "name": "bufferedWriter.Flush"
            },
            {
              "name": "bufferedWriter.Write"
            },
            {
              "name": "bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "clientConnPool.GetClientConn"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "noDialClientConnPool.GetClientConn"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "requestBody.Close"
            },
            {
              "name": "responseWriter.Flush"
            },
            {
              "name": "responseWriter.FlushError"
            },
            {
              "name": "responseWriter.Push"
            },
            {
              "name": "responseWriter.Write"
            },
            {
              "name": "responseWriter.WriteHeader"
            },
            {
              "name": "responseWriter.WriteString"
            },
            {
              "name": "roundRobinWriteScheduler.Pop"
            },
            {
              "name": "serve400Handler.ServeHTTP"
            },
            {
              "name": "serverConn.Flush"
            },
            {
              "name": "stickyErrWriter.Write"
            },
            {
              "name": "transportResponseBody.Close"
            },
            {
              "name": "transportResponseBody.Read"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/http2",
          "product": "golang.org/x/net/http2",
          "programRoutines": [
            {
              "name": "outflow.add"
            },
            {
              "name": "outflow.available"
            },
            {
              "name": "outflow.setConnFlow"
            },
            {
              "name": "outflow.take"
            },
            {
              "name": "Server.serveConn"
            },
            {
              "name": "serverConn.newStream"
            },
            {
              "name": "serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "serverConn.processWindowUpdate"
            },
            {
              "name": "serverConn.scheduleFrameWrite"
            },
            {
              "name": "ClientConn.addStreamLocked"
            },
            {
              "name": "Transport.newClientConn"
            },
            {
              "name": "clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "clientConnReadLoop.streamByID"
            },
            {
              "name": "clientStream.awaitFlowControl"
            },
            {
              "name": "clientStream.cleanupWriteRequest"
            },
            {
              "name": "FrameWriteRequest.Consume"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.Ping"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "ClientConn.Shutdown"
            },
            {
              "name": "ConfigureServer"
            },
            {
              "name": "ConfigureTransport"
            },
            {
              "name": "ConfigureTransports"
            },
            {
              "name": "ConnectionError.Error"
            },
            {
              "name": "ErrCode.String"
            },
            {
              "name": "FrameHeader.String"
            },
            {
              "name": "FrameType.String"
            },
            {
              "name": "FrameWriteRequest.String"
            },
            {
              "name": "Framer.ReadFrame"
            },
            {
              "name": "Framer.ReadFrameForHeader"
            },
            {
              "name": "Framer.ReadFrameHeader"
            },
            {
              "name": "Framer.WriteContinuation"
            },
            {
              "name": "Framer.WriteData"
            },
            {
              "name": "Framer.WriteDataPadded"
            },
            {
              "name": "Framer.WriteGoAway"
            },
            {
              "name": "Framer.WriteHeaders"
            },
            {
              "name": "Framer.WritePing"
            },
            {
              "name": "Framer.WritePriority"
            },
            {
              "name": "Framer.WritePriorityUpdate"
            },
            {
              "name": "Framer.WritePushPromise"
            },
            {
              "name": "Framer.WriteRSTStream"
            },
            {
              "name": "Framer.WriteRawFrame"
            },
            {
              "name": "Framer.WriteSettings"
            },
            {
              "name": "Framer.WriteSettingsAck"
            },
            {
              "name": "Framer.WriteWindowUpdate"
            },
            {
              "name": "GoAwayError.Error"
            },
            {
              "name": "ReadFrameHeader"
            },
            {
              "name": "Server.ServeConn"
            },
            {
              "name": "Setting.String"
            },
            {
              "name": "SettingID.String"
            },
            {
              "name": "SettingsFrame.ForeachSetting"
            },
            {
              "name": "StreamError.Error"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            },
            {
              "name": "bufferedWriter.Flush"
            },
            {
              "name": "bufferedWriter.Write"
            },
            {
              "name": "bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "clientConnPool.GetClientConn"
            },
            {
              "name": "connError.Error"
            },
            {
              "name": "dataBuffer.Read"
            },
            {
              "name": "duplicatePseudoHeaderError.Error"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "headerFieldNameError.Error"
            },
            {
              "name": "headerFieldValueError.Error"
            },
            {
              "name": "netHTTPClientConn.Close"
            },
            {
              "name": "netHTTPClientConn.RoundTrip"
            },
            {
              "name": "noDialClientConnPool.GetClientConn"
            },
            {
              "name": "noDialH2RoundTripper.NewClientConn"
            },
            {
              "name": "noDialH2RoundTripper.RoundTrip"
            },
            {
              "name": "pipe.Read"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.CloseStream"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.OpenStream"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.Pop"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.OpenStream"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "pseudoHeaderError.Error"
            },
            {
              "name": "randomWriteScheduler.Pop"
            },
            {
              "name": "requestBody.Close"
            },
            {
              "name": "requestBody.Read"
            },
            {
              "name": "responseWriter.Flush"
            },
            {
              "name": "responseWriter.FlushError"
            },
            {
              "name": "responseWriter.Push"
            },
            {
              "name": "responseWriter.SetReadDeadline"
            },
            {
              "name": "responseWriter.SetWriteDeadline"
            },
            {
              "name": "responseWriter.Write"
            },
            {
              "name": "responseWriter.WriteHeader"
            },
            {
              "name": "responseWriter.WriteString"
            },
            {
              "name": "roundRobinWriteScheduler.OpenStream"
            },
            {
              "name": "roundRobinWriteScheduler.Pop"
            },
            {
              "name": "serverConn.CloseConn"
            },
            {
              "name": "serverConn.Flush"
            },
            {
              "name": "stickyErrWriter.Write"
            },
            {
              "name": "transportResponseBody.Close"
            },
            {
              "name": "transportResponseBody.Read"
            },
            {
              "name": "unencryptedTransport.RoundTrip"
            },
            {
              "name": "writeData.String"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.60.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek (https://ciolek.dev)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-405: Asymmetric Resource Consumption (Amplification)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:59.530Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847186"
        },
        {
          "url": "https://go.dev/cl/847308"
        },
        {
          "url": "https://go.dev/issue/81742"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "title": "Excessive CPU consumption from repeated initial window changes in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-78669",
    "datePublished": "2026-10-08T22:53:59.530Z",
    "dateReserved": "2026-08-24T23:36:15.739Z",
    "dateUpdated": "2026-10-09T16:32:57.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84304 (GCVE-0-2026-84304)

Vulnerability from cvelistv5 – Published: 2026-09-01 18:19 – Updated: 2026-09-01 19:24

Title

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

Summary

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connection and stream flow-control windows. An unauthenticated remote attacker can use concurrent multiplexed streams to exhaust process memory and cause a runtime panic or out-of-memory termination. Receive-buffer compaction is enabled by default and can be controlled temporarily with GRPC_GO_EXPERIMENTAL_ENABLE_RECEIVE_BUFFER_COMPACTION. This issue is fixed in version 1.83.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-01 19:23 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7766 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM
https://github.com/grpc/grpc-go/pull/9331	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9333	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/7354d9c8de…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/8cfeca0e1e…	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.83.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.83.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84304",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-01T19:23:26.130673Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-01T19:24:36.867Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.83.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connection and stream flow-control windows. An unauthenticated remote attacker can use concurrent multiplexed streams to exhaust process memory and cause a runtime panic or out-of-memory termination. Receive-buffer compaction is enabled by default and can be controlled temporarily with GRPC_GO_EXPERIMENTAL_ENABLE_RECEIVE_BUFFER_COMPACTION. This issue is fixed in version 1.83.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T18:19:10.100Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9331",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9331"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9333",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9333"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1"
        }
      ],
      "source": {
        "advisory": "GHSA-vp52-pcj8-j9qc",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-84304",
    "datePublished": "2026-09-01T18:19:10.100Z",
    "dateReserved": "2026-09-01T16:17:43.078Z",
    "dateUpdated": "2026-09-01T19:24:36.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84445 (GCVE-0-2026-84445)

Vulnerability from cvelistv5 – Published: 2026-09-14 16:11 – Updated: 2026-09-14 16:36

Title

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

Summary

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-14 16:36 UTC

CWE

CWE-129 - Improper Validation of Array Index
CWE-248 - Uncaught Exception

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7766 records in the last 180 days details

References

10 references

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM
https://github.com/grpc/grpc-go/issues/9354	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9365	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9366	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9367	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/3822494d8e…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/8668b69c16…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/93e31b4854…	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.82.2 Affected: >= 1.83.0, < 1.83.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84445",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T16:36:00.554548Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-14T16:36:14.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.82.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.83.0, \u003c 1.83.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129: Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T16:11:41.401Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        },
        {
          "name": "https://github.com/grpc/grpc-go/issues/9354",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9365",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9366",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9367",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        }
      ],
      "source": {
        "advisory": "GHSA-2v4p-qf9q-27wj",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-84445",
    "datePublished": "2026-09-14T16:11:41.401Z",
    "dateReserved": "2026-09-01T20:05:09.422Z",
    "dateUpdated": "2026-09-14T16:36:14.966Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97031 (GCVE-0-2026-97031)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 15:59

Title

Reject malformed ECH outer extension references in crypto/tls

Summary

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 15:59 UTC

CWE

CWE-405 - Asymmetric Resource Consumption
CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/847312
https://go.dev/issue/81855
https://groups.google.com/g/golang-announce/c/U2f…
https://pkg.go.dev/vuln/GO-2026-6607

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.26.9 (semver) Affected: 1.27.0-0 , < 1.27.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-97031",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T15:59:09.530145Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-405",
                "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T15:59:17.238Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "decodeInnerClientHello"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-405: Asymmetric Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:58.775Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847312"
        },
        {
          "url": "https://go.dev/issue/81855"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "title": "Reject malformed ECH outer extension references in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-97031",
    "datePublished": "2026-10-08T22:53:58.775Z",
    "dateReserved": "2026-09-23T23:03:36.988Z",
    "dateUpdated": "2026-10-09T15:59:17.238Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:89041

CVE-2026-56860 (GCVE-0-2026-56860)

CVE-2026-56862 (GCVE-0-2026-56862)

CVE-2026-78667 (GCVE-0-2026-78667)

CVE-2026-78669 (GCVE-0-2026-78669)

CVE-2026-84304 (GCVE-0-2026-84304)

CVE-2026-84445 (GCVE-0-2026-84445)

CVE-2026-97031 (GCVE-0-2026-97031)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour