Vulnerability-Lookup

RHSA-2026:89081

Vulnerability from csaf_redhat - Published: 2026-10-24 16:23 - Updated: 2026-10-27 05:39

Summary

Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3

Severity

Critical

Notes

Topic: Red Hat OpenShift Builds 1.8.3

Details: Release of Red Hat OpenShift Builds 1.8.3

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-46600

A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le	—	Vendor Fix fix

Known not affected 29 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le		—

Threats

Impact Important

CVE-2026-56851

A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service (DoS) by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing the application to panic and crash.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 8 products, the same list as for CVE-2026-46600

Known not affected 29 products, the same list as for CVE-2026-46600

Threats

Impact Important

CVE-2026-78667

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 36 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le	—	Vendor Fix fix Workaround

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64		—	Workaround

Threats

Impact Important

CVE-2026-78669

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-97031

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-111943

A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-114406

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Critical

References

74 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:89081	self
https://access.redhat.com/security/cve/CVE-2026-111943	external
https://access.redhat.com/security/cve/CVE-2026-114406	external
https://access.redhat.com/security/cve/CVE-2026-46600	external
https://access.redhat.com/security/cve/CVE-2026-56851	external
https://access.redhat.com/security/cve/CVE-2026-78667	external
https://access.redhat.com/security/cve/CVE-2026-78669	external
https://access.redhat.com/security/cve/CVE-2026-84445	external
https://access.redhat.com/security/cve/CVE-2026-97031	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-46600	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504234	external
https://www.cve.org/CVERecord?id=CVE-2026-46600	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46600	external
https://go.dev/cl/786345	external
https://go.dev/issue/79795	external
https://pkg.go.dev/vuln/GO-2026-5942	external
https://access.redhat.com/security/cve/CVE-2026-56851	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547607	external
https://www.cve.org/CVERecord?id=CVE-2026-56851	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56851	external
https://go.dev/cl/793360	external
https://go.dev/issue/80112	external
https://pkg.go.dev/vuln/GO-2026-6629	external
https://access.redhat.com/security/cve/CVE-2026-78667	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548334	external
https://www.cve.org/CVERecord?id=CVE-2026-78667	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78667	external
https://go.dev/cl/847309	external
https://go.dev/issue/81858	external
https://groups.google.com/g/golang-announce/c/U2f…	external
https://pkg.go.dev/vuln/GO-2026-6609	external
https://access.redhat.com/security/cve/CVE-2026-78669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548344	external
https://www.cve.org/CVERecord?id=CVE-2026-78669	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78669	external
https://go.dev/cl/847186	external
https://go.dev/cl/847308	external
https://go.dev/issue/81742	external
https://groups.google.com/g/golang-announce/c/ZPw…	external
https://pkg.go.dev/vuln/GO-2026-6611	external
https://access.redhat.com/security/cve/CVE-2026-84445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175	external
https://www.cve.org/CVERecord?id=CVE-2026-84445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445	external
https://github.com/grpc/grpc-go/commit/3822494d8e…	external
https://github.com/grpc/grpc-go/commit/8668b69c16…	external
https://github.com/grpc/grpc-go/commit/93e31b4854…	external
https://github.com/grpc/grpc-go/issues/9354	external
https://github.com/grpc/grpc-go/pull/9365	external
https://github.com/grpc/grpc-go/pull/9366	external
https://github.com/grpc/grpc-go/pull/9367	external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-97031	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548336	external
https://www.cve.org/CVERecord?id=CVE-2026-97031	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97031	external
https://go.dev/cl/847312	external
https://go.dev/issue/81855	external
https://pkg.go.dev/vuln/GO-2026-6607	external
https://access.redhat.com/security/cve/CVE-2026-111943	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556068	external
https://access.redhat.com/security/vulnerabilitie…	external
https://www.cve.org/CVERecord?id=CVE-2026-111943	external
https://nvd.nist.gov/vuln/detail/CVE-2026-111943	external
https://github.com/golang/go/issues/82345	external
https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU	external
https://access.redhat.com/security/cve/CVE-2026-114406	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556046	external
https://www.cve.org/CVERecord?id=CVE-2026-114406	external
https://nvd.nist.gov/vuln/detail/CVE-2026-114406	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Builds 1.8.3",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Release of Red Hat OpenShift Builds 1.8.3",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:89081",
        "url": "https://access.redhat.com/errata/RHSA-2026:89081"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-111943",
        "url": "https://access.redhat.com/security/cve/CVE-2026-111943"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-114406",
        "url": "https://access.redhat.com/security/cve/CVE-2026-114406"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46600",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46600"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56851",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56851"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-78667",
        "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-78669",
        "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97031",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89081.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3",
    "tracking": {
      "current_release_date": "2026-10-27T05:39:13+00:00",
      "generator": {
        "date": "2026-10-27T05:39:13+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:89081",
      "initial_release_date": "2026-10-24T16:23:41+00:00",
      "revision_history": [
        {
          "date": "2026-10-24T16:23:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-24T16:23:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-27T05:39:13+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Builds 1.8.3",
                "product": {
                  "name": "Red Hat OpenShift Builds 1.8.3",
                  "product_id": "Red Hat OpenShift Builds 1.8.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_builds:1.8::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Builds"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Ae3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1792840135"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1792835365"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1792835298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Abca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1792836805"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1792844269"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle\u0026tag=1792853955"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ac1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1792837466"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1792838794"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1792837567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1792851895"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1792840135"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Ada9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1792835365"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Ac1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1792835298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Aea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1792836805"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1792844269"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ae2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1792837466"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1792838794"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1792837567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1792851895"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1792840135"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Ae96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1792835365"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1792835298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1792836805"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1792844269"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1792837466"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1792838794"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1792837567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Aeb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1792851895"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1792840135"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1792835365"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Ab0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1792835298"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Af5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1792836805"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1792844269"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ac75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1792837466"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1792838794"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1792837567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1792851895"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64 as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le as a component of Red Hat OpenShift Builds 1.8.3",
          "product_id": "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.8.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-46600",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:59.038876+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504234"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504234",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504234"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/786345",
          "url": "https://go.dev/cl/786345"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79795",
          "url": "https://go.dev/issue/79795"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5942",
          "url": "https://pkg.go.dev/vuln/GO-2026-5942"
        }
      ],
      "release_date": "2026-07-21T19:18:59.755000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing"
    },
    {
      "cve": "CVE-2026-56851",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-07T18:01:23.622132+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547607"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service (DoS) by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing the application to panic and crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547607",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547607"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/793360",
          "url": "https://go.dev/cl/793360"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80112",
          "url": "https://go.dev/issue/80112"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6629",
          "url": "https://pkg.go.dev/vuln/GO-2026-6629"
        }
      ],
      "release_date": "2026-10-07T17:46:35.620000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile"
    },
    {
      "cve": "CVE-2026-78667",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:51.418048+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548334"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity for Red Hat products because an unauthenticated remote attacker can exhaust server compute resources over the network, leading to a complete service outage. Across Red Hat enterprise environments, Go is widely deployed in container runtimes, monitoring daemons, and OpenShift infrastructure components. However, exploitation is restricted to applications that actively listen on the network and serve content using standard library HTTP handlers that process multi-range requests. CLI utilities and server components that do not handle byte-range requests from untrusted clients remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548334",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78667",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847309",
          "url": "https://go.dev/cl/847309"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81858",
          "url": "https://go.dev/issue/81858"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6609",
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "release_date": "2026-10-08T22:53:59.148000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers"
    },
    {
      "cve": "CVE-2026-78669",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:01:28.964317+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go net/http package and the golang.org/x/net/http2 module. A malicious HTTP/2 peer can cause excessive CPU consumption by opening a large number of HTTP/2 streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. Each SETTINGS frame forces the server or client to iterate over all open streams to adjust their flow-control windows, resulting in quadratic CPU usage and denial of service.\n\nThis vulnerability affects all Go programs that serve or consume HTTP/2 traffic using net/http or golang.org/x/net/http2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847186",
          "url": "https://go.dev/cl/847186"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847308",
          "url": "https://go.dev/cl/847308"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81742",
          "url": "https://go.dev/issue/81742"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs",
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6611",
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "release_date": "2026-10-08T22:53:59.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        },
        {
          "category": "workaround",
          "details": "In case you consume HTTP2, upgrade to a patched version of the http module.\n\nVerify:\n```\ngo version\ngo list -m golang.org/x/net\ngovulncheck ./...\n```",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    },
    {
      "cve": "CVE-2026-97031",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:59.284728+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can trigger memory exhaustion and crash server processes without requiring privileges or user interaction. Go applications that terminate TLS connections and accept Encrypted Client Hello configurations are vulnerable to resource amplification during the initial handshake. While the flaw does not facilitate arbitrary code execution or compromise data confidentiality, the resulting denial of service can disrupt critical network services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847312",
          "url": "https://go.dev/cl/847312"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81855",
          "url": "https://go.dev/issue/81855"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6607",
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "release_date": "2026-10-08T22:53:58.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references"
    },
    {
      "cve": "CVE-2026-111943",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-20T09:38:36.160000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556068"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important because Go applications validating TLS certificates could accept unauthorized certificates issued by distrusted intermediate Certificate Authorities, potentially compromising the integrity and confidentiality of secure network communications. Any Go-based client or server relying on standard certificate verification may be exposed to man-in-the-middle attacks if an attacker intercepts traffic using certificates derived from these intermediate keys. Exploitation requires specific network positioning and certificates generated by the untrusted intermediate authorities, limiting opportunistic widespread abuse.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556068",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556068"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-012",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-111943",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/go/issues/82345",
          "url": "https://github.com/golang/go/issues/82345"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU",
          "url": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU"
        }
      ],
      "release_date": "2026-10-20T02:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates"
    },
    {
      "cve": "CVE-2026-114406",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-20T09:01:55.916000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556046"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-114406"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556046",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556046"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-012",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-114406",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-114406"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-114406",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114406"
        }
      ],
      "release_date": "2026-10-20T13:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T16:23:41+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2f120db3fa1a859333766415dbdf9a875baac7654b667714e3a84d7dd9d7fd85_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:37dac15c3e85365d055fee9f87b396cd2ac885b7f33546765cbe417e28ed38ba_ppc64le",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:4470cfdc1b998b161e28a78b0e2967d6b98b00843d3189cc1974c99e64530019_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:73e7c886f7b4a6b9bb937fb55c5f662bb0f599147b6b5697dd84245fb8fbaf41_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:4b71588e2f2c11e1682ef625b23e95c198cebb95023222fe8ea5822b6914c5fd_arm64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:626ea813c0fee12332d4ec0f57300ca3cab89204fa26e83e6c028aac4523b269_amd64",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6a0f736aef0ec19b738d0e3e06b1445b4f50583db99d7af3a0700f2a12c0007a_s390x",
            "Red Hat OpenShift Builds 1.8.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:eb9cbe0bd098d19e38396107ee9ebc70efb3e9f21572470afaa695aba2578c42_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns"
    }
  ]
}

CVE-2026-111943 (GCVE-0-2026-111943)

Vulnerability from cvelistv5 – Published: 2026-10-21 00:52 – Updated: 2026-10-21 01:24

Title

Distrust compromised intermediate certificates in crypto/x509

Summary

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

Severity

No CVSS data available.

CWE

CWE-299 - Improper Check for Certificate Revocation

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

5 references

URL	Tags
https://go.dev/cl/851047
https://go.dev/issue/82345
https://groups.google.com/g/golang-announce/c/66p…
https://pkg.go.dev/vuln/GO-2026-6809
http://www.openwall.com/lists/oss-security/2026/1…

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.26.10 (semver) Affected: 1.27.0-0 , < 1.27.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-10-21T01:24:20.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/20/29"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-299: Improper Check for Certificate Revocation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T00:52:18.359Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/851047"
        },
        {
          "url": "https://go.dev/issue/82345"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/66pojueaQek"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6809"
        }
      ],
      "title": "Distrust compromised intermediate certificates in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-111943",
    "datePublished": "2026-10-21T00:52:18.359Z",
    "dateReserved": "2026-10-17T13:43:28.599Z",
    "dateUpdated": "2026-10-21T01:24:20.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-114406 (GCVE-0-2026-114406)

Vulnerability from cvelistv5 – Published: 2026-10-21 20:56 – Updated: 2026-10-26 11:03

Title

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Summary

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

CWE-295 - Improper Certificate Validation

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1047 records in the last 180 days details

References

17 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:86595	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88455	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88459	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88550	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88560	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88563	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88564	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88662	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88668	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88669	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88779	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:89081	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:89131	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-114406	vdb-entryx_refsource_REDHAT
https://access.redhat.com/security/vulnerabilitie…	technical-descriptionx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2556046	issue-trackingx_refsource_REDHAT

Impacted products

36 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:2026.2.92_v9.0.319-100.3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:2026.2.92_v9.0.319-100.3.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:2026.2.92_v9.0.319-70.3.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:2026.2.92_v9.0.319-81.3.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_4 , < * (rpm) cpe:/o:redhat:rhel_aus:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_8 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_8 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_8 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_2 , < * (rpm) cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_4 , < * (rpm) cpe:/o:redhat:rhel_e4s:9.4::baseos
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_6 , < * (rpm) cpe:/o:redhat:rhel_eus:9.6::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 2026.2.92_v9.0.319-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792840135 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792835365 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792835298 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792836805 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792844269 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792837466 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792838794 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792837567 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792851895 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792837598 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792837398 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792838765 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792835879 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792859629 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792857112 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792840655 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792839475 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792835571 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1

Date Public

2026-10-20 13:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-100.3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-100.3.el10_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-70.3.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-81.3.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2026.2.92_v9.0.319-1.hum1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-controller-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792840135",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835365",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835298",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792836805",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-rhel9-operator",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792844269",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837466",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-webhook-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792838794",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837567",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-webhook-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792851895",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-controller-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837598",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-git-cloner-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837398",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-bundler-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792838765",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-processing-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835879",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-rhel10-operator",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792859629",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792857112",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-webhook-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792840655",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-waiters-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792839475",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-webhook-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835571",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argocd-agent-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argocd-image-updater-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argocd-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argo-rollouts-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/dex-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/gitops-promoter-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/gitops-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/gitops-rhel9-operator",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-10-20T13:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Critical"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T11:03:04.170Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:86595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:86595"
        },
        {
          "name": "RHSA-2026:88455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88455"
        },
        {
          "name": "RHSA-2026:88459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88459"
        },
        {
          "name": "RHSA-2026:88550",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88550"
        },
        {
          "name": "RHSA-2026:88560",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88560"
        },
        {
          "name": "RHSA-2026:88562",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88562"
        },
        {
          "name": "RHSA-2026:88563",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88563"
        },
        {
          "name": "RHSA-2026:88564",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88564"
        },
        {
          "name": "RHSA-2026:88662",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88662"
        },
        {
          "name": "RHSA-2026:88668",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88668"
        },
        {
          "name": "RHSA-2026:88669",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88669"
        },
        {
          "name": "RHSA-2026:88779",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88779"
        },
        {
          "name": "RHSA-2026:89081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        },
        {
          "name": "RHSA-2026:89131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-114406"
        },
        {
          "name": "RHSB-2026-012",
          "tags": [
            "technical-description",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
        },
        {
          "name": "RHBZ#2556046",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556046"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-20T09:01:55.916Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-10-20T13:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns",
      "workarounds": [
        {
          "lang": "en",
          "value": "See the security bulletin for a detailed mitigation procedure."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-295: Improper Certificate Validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-114406",
    "datePublished": "2026-10-21T20:56:26.866Z",
    "dateReserved": "2026-10-21T11:57:07.758Z",
    "dateUpdated": "2026-10-26T11:03:04.170Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46600 (GCVE-0-2026-46600)

Vulnerability from cvelistv5 – Published: 2026-07-21 19:18 – Updated: 2026-08-14 15:46

Title

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Summary

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 15:00 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/786345
https://go.dev/issue/79795
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-5942

Impacted products

2 products

Vendor	Product	Version
Go standard library	net	Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
golang.org/x/net	golang.org/x/net/dns/dnsmessage	Affected: 0 , < 0.56.0 (semver)

Credits

Mundur (https://github.com/M0nd0R)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-46600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T15:00:27.171241Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T15:00:35.473Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net",
          "product": "net",
          "programRoutines": [
            {
              "name": "cgoResSearch"
            },
            {
              "name": "LookupCNAME"
            },
            {
              "name": "Resolver.LookupCNAME"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/dns/dnsmessage",
          "product": "golang.org/x/net/dns/dnsmessage",
          "programRoutines": [
            {
              "name": "unpackSVCBResource"
            },
            {
              "name": "Message.Unpack"
            },
            {
              "name": "Parser.Additional"
            },
            {
              "name": "Parser.AllAdditionals"
            },
            {
              "name": "Parser.AllAnswers"
            },
            {
              "name": "Parser.AllAuthorities"
            },
            {
              "name": "Parser.Answer"
            },
            {
              "name": "Parser.Authority"
            },
            {
              "name": "Parser.HTTPSResource"
            },
            {
              "name": "Parser.SVCBResource"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.56.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mundur (https://github.com/M0nd0R)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T15:46:12.894Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/786345"
        },
        {
          "url": "https://go.dev/issue/79795"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5942"
        }
      ],
      "title": "Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-46600",
    "datePublished": "2026-07-21T19:18:59.755Z",
    "dateReserved": "2026-05-15T17:35:00.814Z",
    "dateUpdated": "2026-08-14T15:46:12.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56851 (GCVE-0-2026-56851)

Vulnerability from cvelistv5 – Published: 2026-10-07 17:46 – Updated: 2026-10-08 13:49

Title

Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

Summary

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-08 13:48 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

3 references

URL	Tags
https://go.dev/cl/793360
https://go.dev/issue/80112
https://pkg.go.dev/vuln/GO-2026-6629

Impacted products

1 product

Vendor	Product	Version
golang.org/x/text	golang.org/x/text/secure/precis	Affected: 0 , < 0.41.0 (semver)

Credits

Omkhar Arasaratnam (GitHub: omkhar)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56851",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-08T13:48:57.351617Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-08T13:49:06.348Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/text/secure/precis",
          "product": "golang.org/x/text/secure/precis",
          "programRoutines": [
            {
              "name": "nickAdditionalMapping.Transform"
            },
            {
              "name": "Profile.Append"
            },
            {
              "name": "Profile.AppendCompareKey"
            },
            {
              "name": "Profile.Bytes"
            },
            {
              "name": "Profile.Compare"
            },
            {
              "name": "Profile.CompareKey"
            },
            {
              "name": "Profile.NewTransformer"
            },
            {
              "name": "Profile.String"
            },
            {
              "name": "Transformer.Bytes"
            },
            {
              "name": "Transformer.String"
            },
            {
              "name": "Transformer.Transform"
            }
          ],
          "vendor": "golang.org/x/text",
          "versions": [
            {
              "lessThan": "0.41.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Omkhar Arasaratnam (GitHub: omkhar)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-07T17:46:35.620Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/793360"
        },
        {
          "url": "https://go.dev/issue/80112"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6629"
        }
      ],
      "title": "Panic parsing crafted input in x/text/secure/precis in golang.org/x/text"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56851",
    "datePublished": "2026-10-07T17:46:35.620Z",
    "dateReserved": "2026-06-23T15:10:49.352Z",
    "dateUpdated": "2026-10-08T13:49:06.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-78667 (GCVE-0-2026-78667)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 16:12

Title

Lack of limit on size of parsed Range headers in net/http

Summary

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 16:12 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/847309
https://go.dev/issue/81858
https://groups.google.com/g/golang-announce/c/U2f…
https://pkg.go.dev/vuln/GO-2026-6609

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.26.9 (semver) Affected: 1.27.0-0 , < 1.27.2 (semver)

Credits

Jakub Ciolek (https://ciolek.dev)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-78667",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T16:12:49.383383Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T16:12:53.569Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "parseRange"
            },
            {
              "name": "ServeContent"
            },
            {
              "name": "ServeFile"
            },
            {
              "name": "ServeFileFS"
            },
            {
              "name": "fileHandler.ServeHTTP"
            },
            {
              "name": "fileTransport.RoundTrip"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek (https://ciolek.dev)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:59.148Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847309"
        },
        {
          "url": "https://go.dev/issue/81858"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "title": "Lack of limit on size of parsed Range headers in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-78667",
    "datePublished": "2026-10-08T22:53:59.148Z",
    "dateReserved": "2026-08-24T23:36:15.738Z",
    "dateUpdated": "2026-10-09T16:12:53.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-78669 (GCVE-0-2026-78669)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 16:32

Title

Excessive CPU consumption from repeated initial window changes in net/http

Summary

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 16:32 UTC

CWE

CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

6 references

URL	Tags
https://go.dev/cl/847186
https://go.dev/cl/847308
https://go.dev/issue/81742
https://groups.google.com/g/golang-announce/c/U2f…
https://groups.google.com/g/golang-announce/c/ZPw…
https://pkg.go.dev/vuln/GO-2026-6611

Impacted products

3 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.26.9 (semver)
Go standard library	net/http/internal/http2	Affected: 1.27.0-0 , < 1.27.2 (semver)
golang.org/x/net	golang.org/x/net/http2	Affected: 0 , < 0.60.0 (semver)

Credits

Jakub Ciolek (https://ciolek.dev)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-78669",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T16:32:53.872432Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-405",
                "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T16:32:57.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "http2outflow.add"
            },
            {
              "name": "http2outflow.available"
            },
            {
              "name": "http2outflow.setConnFlow"
            },
            {
              "name": "http2outflow.take"
            },
            {
              "name": "http2Server.serveConn"
            },
            {
              "name": "http2serverConn.newStream"
            },
            {
              "name": "http2serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "http2serverConn.processWindowUpdate"
            },
            {
              "name": "http2serverConn.scheduleFrameWrite"
            },
            {
              "name": "http2ClientConn.addStreamLocked"
            },
            {
              "name": "http2Transport.newClientConn"
            },
            {
              "name": "http2clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "http2clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "http2clientConnReadLoop.streamByID"
            },
            {
              "name": "http2clientStream.awaitFlowControl"
            },
            {
              "name": "http2clientStream.cleanupWriteRequest"
            },
            {
              "name": "http2FrameWriteRequest.Consume"
            },
            {
              "name": "CanonicalHeaderKey"
            },
            {
              "name": "Client.CloseIdleConnections"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "Cookie.String"
            },
            {
              "name": "Cookie.Valid"
            },
            {
              "name": "CrossOriginProtection.AddInsecureBypassPattern"
            },
            {
              "name": "CrossOriginProtection.AddTrustedOrigin"
            },
            {
              "name": "CrossOriginProtection.Check"
            },
            {
              "name": "Dir.Open"
            },
            {
              "name": "Error"
            },
            {
              "name": "Get"
            },
            {
              "name": "Handle"
            },
            {
              "name": "HandleFunc"
            },
            {
              "name": "HandlerFunc.ServeHTTP"
            },
            {
              "name": "Head"
            },
            {
              "name": "Header.Add"
            },
            {
              "name": "Header.Del"
            },
            {
              "name": "Header.Get"
            },
            {
              "name": "Header.Set"
            },
            {
              "name": "Header.Values"
            },
            {
              "name": "Header.Write"
            },
            {
              "name": "Header.WriteSubset"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "NewRequest"
            },
            {
              "name": "NewRequestWithContext"
            },
            {
              "name": "NotFound"
            },
            {
              "name": "ParseCookie"
            },
            {
              "name": "ParseSetCookie"
            },
            {
              "name": "ParseTime"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "ProxyFromEnvironment"
            },
            {
              "name": "ReadRequest"
            },
            {
              "name": "ReadResponse"
            },
            {
              "name": "Redirect"
            },
            {
              "name": "Request.AddCookie"
            },
            {
              "name": "Request.BasicAuth"
            },
            {
              "name": "Request.Cookie"
            },
            {
              "name": "Request.Cookies"
            },
            {
              "name": "Request.CookiesNamed"
            },
            {
              "name": "Request.FormFile"
            },
            {
              "name": "Request.FormValue"
            },
            {
              "name": "Request.MultipartReader"
            },
            {
              "name": "Request.ParseForm"
            },
            {
              "name": "Request.ParseMultipartForm"
            },
            {
              "name": "Request.PostFormValue"
            },
            {
              "name": "Request.Referer"
            },
            {
              "name": "Request.SetBasicAuth"
            },
            {
              "name": "Request.UserAgent"
            },
            {
              "name": "Request.Write"
            },
            {
              "name": "Request.WriteProxy"
            },
            {
              "name": "Response.Cookies"
            },
            {
              "name": "Response.Location"
            },
            {
              "name": "Response.Write"
            },
            {
              "name": "ResponseController.EnableFullDuplex"
            },
            {
              "name": "ResponseController.Flush"
            },
            {
              "name": "ResponseController.Hijack"
            },
            {
              "name": "ResponseController.SetReadDeadline"
            },
            {
              "name": "ResponseController.SetWriteDeadline"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeContent"
            },
            {
              "name": "ServeFile"
            },
            {
              "name": "ServeFileFS"
            },
            {
              "name": "ServeMux.Handle"
            },
            {
              "name": "ServeMux.HandleFunc"
            },
            {
              "name": "ServeMux.ServeHTTP"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.Close"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            },
            {
              "name": "Server.SetKeepAlivesEnabled"
            },
            {
              "name": "Server.Shutdown"
            },
            {
              "name": "SetCookie"
            },
            {
              "name": "Transport.CancelRequest"
            },
            {
              "name": "Transport.Clone"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "body.Close"
            },
            {
              "name": "body.Read"
            },
            {
              "name": "bodyEOFSignal.Close"
            },
            {
              "name": "bodyEOFSignal.Read"
            },
            {
              "name": "bodyLocked.Read"
            },
            {
              "name": "bufioFlushWriter.Write"
            },
            {
              "name": "cancelTimerBody.Close"
            },
            {
              "name": "cancelTimerBody.Read"
            },
            {
              "name": "checkConnErrorWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "connReader.Read"
            },
            {
              "name": "connectMethodKey.String"
            },
            {
              "name": "expectContinueReader.Close"
            },
            {
              "name": "expectContinueReader.Read"
            },
            {
              "name": "extraHeader.Write"
            },
            {
              "name": "fileHandler.ServeHTTP"
            },
            {
              "name": "fileTransport.RoundTrip"
            },
            {
              "name": "globalOptionsHandler.ServeHTTP"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "http1ClientConn.Close"
            },
            {
              "name": "http1ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.Close"
            },
            {
              "name": "http2ClientConn.Ping"
            },
            {
              "name": "http2ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.Shutdown"
            },
            {
              "name": "http2ConnectionError.Error"
            },
            {
              "name": "http2ErrCode.String"
            },
            {
              "name": "http2FrameHeader.String"
            },
            {
              "name": "http2FrameType.String"
            },
            {
              "name": "http2FrameWriteRequest.String"
            },
            {
              "name": "http2Framer.ReadFrame"
            },
            {
              "name": "http2Framer.ReadFrameForHeader"
            },
            {
              "name": "http2Framer.ReadFrameHeader"
            },
            {
              "name": "http2Framer.WriteContinuation"
            },
            {
              "name": "http2Framer.WriteData"
            },
            {
              "name": "http2Framer.WriteDataPadded"
            },
            {
              "name": "http2Framer.WriteGoAway"
            },
            {
              "name": "http2Framer.WriteHeaders"
            },
            {
              "name": "http2Framer.WritePing"
            },
            {
              "name": "http2Framer.WritePriority"
            },
            {
              "name": "http2Framer.WritePushPromise"
            },
            {
              "name": "http2Framer.WriteRSTStream"
            },
            {
              "name": "http2Framer.WriteRawFrame"
            },
            {
              "name": "http2Framer.WriteSettings"
            },
            {
              "name": "http2Framer.WriteSettingsAck"
            },
            {
              "name": "http2Framer.WriteWindowUpdate"
            },
            {
              "name": "http2GoAwayError.Error"
            },
            {
              "name": "http2Server.ServeConn"
            },
            {
              "name": "http2Setting.String"
            },
            {
              "name": "http2SettingID.String"
            },
            {
              "name": "http2SettingsFrame.ForeachSetting"
            },
            {
              "name": "http2StreamError.Error"
            },
            {
              "name": "http2Transport.CloseIdleConnections"
            },
            {
              "name": "http2Transport.NewClientConn"
            },
            {
              "name": "http2Transport.RoundTrip"
            },
            {
              "name": "http2Transport.RoundTripOpt"
            },
            {
              "name": "http2bufferedWriter.Flush"
            },
            {
              "name": "http2bufferedWriter.Write"
            },
            {
              "name": "http2bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "http2chunkWriter.Write"
            },
            {
              "name": "http2clientConnPool.GetClientConn"
            },
            {
              "name": "http2connError.Error"
            },
            {
              "name": "http2dataBuffer.Read"
            },
            {
              "name": "http2duplicatePseudoHeaderError.Error"
            },
            {
              "name": "http2gzipReader.Close"
            },
            {
              "name": "http2gzipReader.Read"
            },
            {
              "name": "http2headerFieldNameError.Error"
            },
            {
              "name": "http2headerFieldValueError.Error"
            },
            {
              "name": "http2netHTTPClientConn.Close"
            },
            {
              "name": "http2netHTTPClientConn.RoundTrip"
            },
            {
              "name": "http2noDialClientConnPool.GetClientConn"
            },
            {
              "name": "http2noDialH2RoundTripper.NewClientConn"
            },
            {
              "name": "http2noDialH2RoundTripper.RoundTrip"
            },
            {
              "name": "http2pipe.Read"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.CloseStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.OpenStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC7540.Pop"
            },
            {
              "name": "http2priorityWriteSchedulerRFC9218.OpenStream"
            },
            {
              "name": "http2priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "http2pseudoHeaderError.Error"
            },
            {
              "name": "http2randomWriteScheduler.Pop"
            },
            {
              "name": "http2requestBody.Close"
            },
            {
              "name": "http2requestBody.Read"
            },
            {
              "name": "http2responseWriter.Flush"
            },
            {
              "name": "http2responseWriter.FlushError"
            },
            {
              "name": "http2responseWriter.Push"
            },
            {
              "name": "http2responseWriter.SetReadDeadline"
            },
            {
              "name": "http2responseWriter.SetWriteDeadline"
            },
            {
              "name": "http2responseWriter.Write"
            },
            {
              "name": "http2responseWriter.WriteHeader"
            },
            {
              "name": "http2responseWriter.WriteString"
            },
            {
              "name": "http2roundRobinWriteScheduler.OpenStream"
            },
            {
              "name": "http2roundRobinWriteScheduler.Pop"
            },
            {
              "name": "http2serverConn.CloseConn"
            },
            {
              "name": "http2serverConn.Flush"
            },
            {
              "name": "http2stickyErrWriter.Write"
            },
            {
              "name": "http2transportResponseBody.Close"
            },
            {
              "name": "http2transportResponseBody.Read"
            },
            {
              "name": "http2unencryptedTransport.RoundTrip"
            },
            {
              "name": "http2writeData.String"
            },
            {
              "name": "initALPNRequest.ServeHTTP"
            },
            {
              "name": "loggingConn.Close"
            },
            {
              "name": "loggingConn.Read"
            },
            {
              "name": "loggingConn.Write"
            },
            {
              "name": "maxBytesReader.Close"
            },
            {
              "name": "maxBytesReader.Read"
            },
            {
              "name": "onceCloseListener.Close"
            },
            {
              "name": "persistConn.Read"
            },
            {
              "name": "persistConnWriter.ReadFrom"
            },
            {
              "name": "persistConnWriter.Write"
            },
            {
              "name": "populateResponse.Write"
            },
            {
              "name": "populateResponse.WriteHeader"
            },
            {
              "name": "readTrackingBody.Close"
            },
            {
              "name": "readTrackingBody.Read"
            },
            {
              "name": "readWriteCloserBody.CloseWrite"
            },
            {
              "name": "readWriteCloserBody.Read"
            },
            {
              "name": "redirectHandler.ServeHTTP"
            },
            {
              "name": "response.Flush"
            },
            {
              "name": "response.FlushError"
            },
            {
              "name": "response.Hijack"
            },
            {
              "name": "response.ReadFrom"
            },
            {
              "name": "response.Write"
            },
            {
              "name": "response.WriteHeader"
            },
            {
              "name": "response.WriteString"
            },
            {
              "name": "serverHandler.ServeHTTP"
            },
            {
              "name": "socksDialer.DialWithConn"
            },
            {
              "name": "socksUsernamePassword.Authenticate"
            },
            {
              "name": "stringWriter.WriteString"
            },
            {
              "name": "timeoutHandler.ServeHTTP"
            },
            {
              "name": "timeoutWriter.Write"
            },
            {
              "name": "timeoutWriter.WriteHeader"
            },
            {
              "name": "transportReadFromServerError.Error"
            },
            {
              "name": "unencryptedHTTP2Request.ServeHTTP"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http/internal/http2",
          "product": "net/http/internal/http2",
          "programRoutines": [
            {
              "name": "outflow.add"
            },
            {
              "name": "outflow.available"
            },
            {
              "name": "outflow.setConnFlow"
            },
            {
              "name": "outflow.take"
            },
            {
              "name": "Server.serveConn"
            },
            {
              "name": "serverConn.newStream"
            },
            {
              "name": "serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "serverConn.processWindowUpdate"
            },
            {
              "name": "serverConn.scheduleFrameWrite"
            },
            {
              "name": "ClientConn.addStreamLocked"
            },
            {
              "name": "Transport.newClientConn"
            },
            {
              "name": "clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "clientConnReadLoop.streamByID"
            },
            {
              "name": "clientStream.awaitFlowControl"
            },
            {
              "name": "clientStream.cleanupWriteRequest"
            },
            {
              "name": "FrameWriteRequest.Consume"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.Ping"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "ClientConn.Shutdown"
            },
            {
              "name": "Framer.ReadFrame"
            },
            {
              "name": "Framer.ReadFrameForHeader"
            },
            {
              "name": "Framer.ReadFrameHeader"
            },
            {
              "name": "Framer.WriteContinuation"
            },
            {
              "name": "Framer.WriteData"
            },
            {
              "name": "Framer.WriteDataPadded"
            },
            {
              "name": "Framer.WriteGoAway"
            },
            {
              "name": "Framer.WriteHeaders"
            },
            {
              "name": "Framer.WritePing"
            },
            {
              "name": "Framer.WritePriority"
            },
            {
              "name": "Framer.WritePriorityUpdate"
            },
            {
              "name": "Framer.WritePushPromise"
            },
            {
              "name": "Framer.WriteRSTStream"
            },
            {
              "name": "Framer.WriteRawFrame"
            },
            {
              "name": "Framer.WriteSettings"
            },
            {
              "name": "Framer.WriteSettingsAck"
            },
            {
              "name": "Framer.WriteWindowUpdate"
            },
            {
              "name": "NetHTTPClientConn.Close"
            },
            {
              "name": "NetHTTPClientConn.Ping"
            },
            {
              "name": "NetHTTPClientConn.RoundTrip"
            },
            {
              "name": "ReadFrameHeader"
            },
            {
              "name": "Server.GracefulShutdown"
            },
            {
              "name": "Server.ServeConn"
            },
            {
              "name": "SettingsFrame.ForeachSetting"
            },
            {
              "name": "Transport.AddConn"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            },
            {
              "name": "bufferedWriter.Flush"
            },
            {
              "name": "bufferedWriter.Write"
            },
            {
              "name": "bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "clientConnPool.GetClientConn"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "noDialClientConnPool.GetClientConn"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "requestBody.Close"
            },
            {
              "name": "responseWriter.Flush"
            },
            {
              "name": "responseWriter.FlushError"
            },
            {
              "name": "responseWriter.Push"
            },
            {
              "name": "responseWriter.Write"
            },
            {
              "name": "responseWriter.WriteHeader"
            },
            {
              "name": "responseWriter.WriteString"
            },
            {
              "name": "roundRobinWriteScheduler.Pop"
            },
            {
              "name": "serve400Handler.ServeHTTP"
            },
            {
              "name": "serverConn.Flush"
            },
            {
              "name": "stickyErrWriter.Write"
            },
            {
              "name": "transportResponseBody.Close"
            },
            {
              "name": "transportResponseBody.Read"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/http2",
          "product": "golang.org/x/net/http2",
          "programRoutines": [
            {
              "name": "outflow.add"
            },
            {
              "name": "outflow.available"
            },
            {
              "name": "outflow.setConnFlow"
            },
            {
              "name": "outflow.take"
            },
            {
              "name": "Server.serveConn"
            },
            {
              "name": "serverConn.newStream"
            },
            {
              "name": "serverConn.processSettingInitialWindowSize"
            },
            {
              "name": "serverConn.processWindowUpdate"
            },
            {
              "name": "serverConn.scheduleFrameWrite"
            },
            {
              "name": "ClientConn.addStreamLocked"
            },
            {
              "name": "Transport.newClientConn"
            },
            {
              "name": "clientConnReadLoop.processSettingsNoWrite"
            },
            {
              "name": "clientConnReadLoop.processWindowUpdate"
            },
            {
              "name": "clientConnReadLoop.streamByID"
            },
            {
              "name": "clientStream.awaitFlowControl"
            },
            {
              "name": "clientStream.cleanupWriteRequest"
            },
            {
              "name": "FrameWriteRequest.Consume"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.Ping"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "ClientConn.Shutdown"
            },
            {
              "name": "ConfigureServer"
            },
            {
              "name": "ConfigureTransport"
            },
            {
              "name": "ConfigureTransports"
            },
            {
              "name": "ConnectionError.Error"
            },
            {
              "name": "ErrCode.String"
            },
            {
              "name": "FrameHeader.String"
            },
            {
              "name": "FrameType.String"
            },
            {
              "name": "FrameWriteRequest.String"
            },
            {
              "name": "Framer.ReadFrame"
            },
            {
              "name": "Framer.ReadFrameForHeader"
            },
            {
              "name": "Framer.ReadFrameHeader"
            },
            {
              "name": "Framer.WriteContinuation"
            },
            {
              "name": "Framer.WriteData"
            },
            {
              "name": "Framer.WriteDataPadded"
            },
            {
              "name": "Framer.WriteGoAway"
            },
            {
              "name": "Framer.WriteHeaders"
            },
            {
              "name": "Framer.WritePing"
            },
            {
              "name": "Framer.WritePriority"
            },
            {
              "name": "Framer.WritePriorityUpdate"
            },
            {
              "name": "Framer.WritePushPromise"
            },
            {
              "name": "Framer.WriteRSTStream"
            },
            {
              "name": "Framer.WriteRawFrame"
            },
            {
              "name": "Framer.WriteSettings"
            },
            {
              "name": "Framer.WriteSettingsAck"
            },
            {
              "name": "Framer.WriteWindowUpdate"
            },
            {
              "name": "GoAwayError.Error"
            },
            {
              "name": "ReadFrameHeader"
            },
            {
              "name": "Server.ServeConn"
            },
            {
              "name": "Setting.String"
            },
            {
              "name": "SettingID.String"
            },
            {
              "name": "SettingsFrame.ForeachSetting"
            },
            {
              "name": "StreamError.Error"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            },
            {
              "name": "bufferedWriter.Flush"
            },
            {
              "name": "bufferedWriter.Write"
            },
            {
              "name": "bufferedWriterTimeoutWriter.Write"
            },
            {
              "name": "chunkWriter.Write"
            },
            {
              "name": "clientConnPool.GetClientConn"
            },
            {
              "name": "connError.Error"
            },
            {
              "name": "dataBuffer.Read"
            },
            {
              "name": "duplicatePseudoHeaderError.Error"
            },
            {
              "name": "gzipReader.Close"
            },
            {
              "name": "gzipReader.Read"
            },
            {
              "name": "headerFieldNameError.Error"
            },
            {
              "name": "headerFieldValueError.Error"
            },
            {
              "name": "netHTTPClientConn.Close"
            },
            {
              "name": "netHTTPClientConn.RoundTrip"
            },
            {
              "name": "noDialClientConnPool.GetClientConn"
            },
            {
              "name": "noDialH2RoundTripper.NewClientConn"
            },
            {
              "name": "noDialH2RoundTripper.RoundTrip"
            },
            {
              "name": "pipe.Read"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.CloseStream"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.OpenStream"
            },
            {
              "name": "priorityWriteSchedulerRFC7540.Pop"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.OpenStream"
            },
            {
              "name": "priorityWriteSchedulerRFC9218.Pop"
            },
            {
              "name": "pseudoHeaderError.Error"
            },
            {
              "name": "randomWriteScheduler.Pop"
            },
            {
              "name": "requestBody.Close"
            },
            {
              "name": "requestBody.Read"
            },
            {
              "name": "responseWriter.Flush"
            },
            {
              "name": "responseWriter.FlushError"
            },
            {
              "name": "responseWriter.Push"
            },
            {
              "name": "responseWriter.SetReadDeadline"
            },
            {
              "name": "responseWriter.SetWriteDeadline"
            },
            {
              "name": "responseWriter.Write"
            },
            {
              "name": "responseWriter.WriteHeader"
            },
            {
              "name": "responseWriter.WriteString"
            },
            {
              "name": "roundRobinWriteScheduler.OpenStream"
            },
            {
              "name": "roundRobinWriteScheduler.Pop"
            },
            {
              "name": "serverConn.CloseConn"
            },
            {
              "name": "serverConn.Flush"
            },
            {
              "name": "stickyErrWriter.Write"
            },
            {
              "name": "transportResponseBody.Close"
            },
            {
              "name": "transportResponseBody.Read"
            },
            {
              "name": "unencryptedTransport.RoundTrip"
            },
            {
              "name": "writeData.String"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.60.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek (https://ciolek.dev)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-405: Asymmetric Resource Consumption (Amplification)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:59.530Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847186"
        },
        {
          "url": "https://go.dev/cl/847308"
        },
        {
          "url": "https://go.dev/issue/81742"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "title": "Excessive CPU consumption from repeated initial window changes in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-78669",
    "datePublished": "2026-10-08T22:53:59.530Z",
    "dateReserved": "2026-08-24T23:36:15.739Z",
    "dateUpdated": "2026-10-09T16:32:57.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84445 (GCVE-0-2026-84445)

Vulnerability from cvelistv5 – Published: 2026-09-14 16:11 – Updated: 2026-09-14 16:36

Title

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

Summary

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-14 16:36 UTC

CWE

CWE-129 - Improper Validation of Array Index
CWE-248 - Uncaught Exception

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7797 records in the last 180 days details

References

10 references

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM
https://github.com/grpc/grpc-go/issues/9354	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9365	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9366	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9367	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/3822494d8e…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/8668b69c16…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/93e31b4854…	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.82.2 Affected: >= 1.83.0, < 1.83.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84445",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T16:36:00.554548Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-14T16:36:14.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.82.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.83.0, \u003c 1.83.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129: Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T16:11:41.401Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        },
        {
          "name": "https://github.com/grpc/grpc-go/issues/9354",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9365",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9366",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9367",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        }
      ],
      "source": {
        "advisory": "GHSA-2v4p-qf9q-27wj",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-84445",
    "datePublished": "2026-09-14T16:11:41.401Z",
    "dateReserved": "2026-09-01T20:05:09.422Z",
    "dateUpdated": "2026-09-14T16:36:14.966Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97031 (GCVE-0-2026-97031)

Vulnerability from cvelistv5 – Published: 2026-10-08 22:53 – Updated: 2026-10-09 15:59

Title

Reject malformed ECH outer extension references in crypto/tls

Summary

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 15:59 UTC

CWE

CWE-405 - Asymmetric Resource Consumption
CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/847312
https://go.dev/issue/81855
https://groups.google.com/g/golang-announce/c/U2f…
https://pkg.go.dev/vuln/GO-2026-6607

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.26.9 (semver) Affected: 1.27.0-0 , < 1.27.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-97031",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T15:59:09.530145Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-405",
                "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T15:59:17.238Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "decodeInnerClientHello"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-405: Asymmetric Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-08T22:53:58.775Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/847312"
        },
        {
          "url": "https://go.dev/issue/81855"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "title": "Reject malformed ECH outer extension references in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-97031",
    "datePublished": "2026-10-08T22:53:58.775Z",
    "dateReserved": "2026-09-23T23:03:36.988Z",
    "dateUpdated": "2026-10-09T15:59:17.238Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:89081

CVE-2026-111943 (GCVE-0-2026-111943)

CVE-2026-114406 (GCVE-0-2026-114406)

CVE-2026-46600 (GCVE-0-2026-46600)

CVE-2026-56851 (GCVE-0-2026-56851)

CVE-2026-78667 (GCVE-0-2026-78667)

CVE-2026-78669 (GCVE-0-2026-78669)

CVE-2026-84445 (GCVE-0-2026-84445)

CVE-2026-97031 (GCVE-0-2026-97031)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour