Vulnerability-Lookup

RHSA-2026:89131

Vulnerability from csaf_redhat - Published: 2026-10-24 20:43 - Updated: 2026-10-26 17:58

Summary

Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2

Severity

Critical

Notes

Topic: Red Hat OpenShift Builds 1.9.2

Details: Release of Red Hat OpenShift Builds 1.9.2

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x	—	Vendor Fix fix Workaround

Known not affected 33 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39821

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-40161

A flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoint, the system-configured Git API token (such as a GitHub Personal Access Token or GitLab token) can be sent to the attacker. This information disclosure allows for the exfiltration of sensitive API tokens.

7.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Moderate

CVE-2026-40938

A flaw was found in Tekton Pipelines, a system for declaring continuous integration/continuous delivery (CI/CD) pipelines. An authenticated user, able to submit `ResolutionRequest` objects, can exploit a vulnerability by injecting malicious commands into the git resolver's revision parameter. This allows for the execution of unauthorized programs on the resolver pod. Successful exploitation can lead to the exfiltration of all cluster-wide secrets, resulting in significant information disclosure.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-46600

A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le	—	Vendor Fix fix

Known not affected 25 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64		—

Threats

Impact Important

CVE-2026-56851

A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service (DoS) by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing the application to panic and crash.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le	—	Vendor Fix fix

Known not affected 29 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64		—

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-78667

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 36 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64	—	Vendor Fix fix Workaround

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64		—	Workaround

Threats

Impact Important

CVE-2026-78669

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-84304

A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 33 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-97031

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-111943

A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Important

CVE-2026-114406

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 36 products, the same list as for CVE-2026-78667

Known not affected 1 product, the same list as for CVE-2026-78667

Threats

Impact Critical

References

158 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:89131	self
https://access.redhat.com/security/cve/CVE-2026-111943	external
https://access.redhat.com/security/cve/CVE-2026-114406	external
https://access.redhat.com/security/cve/CVE-2026-33818	external
https://access.redhat.com/security/cve/CVE-2026-39821	external
https://access.redhat.com/security/cve/CVE-2026-40161	external
https://access.redhat.com/security/cve/CVE-2026-40938	external
https://access.redhat.com/security/cve/CVE-2026-46600	external
https://access.redhat.com/security/cve/CVE-2026-56851	external
https://access.redhat.com/security/cve/CVE-2026-56853	external
https://access.redhat.com/security/cve/CVE-2026-56858	external
https://access.redhat.com/security/cve/CVE-2026-56859	external
https://access.redhat.com/security/cve/CVE-2026-56860	external
https://access.redhat.com/security/cve/CVE-2026-56862	external
https://access.redhat.com/security/cve/CVE-2026-78667	external
https://access.redhat.com/security/cve/CVE-2026-78669	external
https://access.redhat.com/security/cve/CVE-2026-84304	external
https://access.redhat.com/security/cve/CVE-2026-84445	external
https://access.redhat.com/security/cve/CVE-2026-97031	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://www.cve.org/CVERecord?id=CVE-2026-33818	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818	external
https://go.dev/cl/814980	external
https://go.dev/issue/80405	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-5972	external
https://access.redhat.com/security/cve/CVE-2026-39821	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	external
https://www.cve.org/CVERecord?id=CVE-2026-39821	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821	external
https://go.dev/cl/767220	external
https://go.dev/issue/78760	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5026	external
https://access.redhat.com/security/cve/CVE-2026-40161	self
https://bugzilla.redhat.com/show_bug.cgi?id=2460173	external
https://www.cve.org/CVERecord?id=CVE-2026-40161	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40161	external
https://github.com/tektoncd/pipeline/issues/9608	external
https://github.com/tektoncd/pipeline/issues/9609	external
https://github.com/tektoncd/pipeline/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-40938	self
https://bugzilla.redhat.com/show_bug.cgi?id=2460292	external
https://www.cve.org/CVERecord?id=CVE-2026-40938	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40938	external
https://github.com/tektoncd/pipeline/releases/tag…	external
https://github.com/tektoncd/pipeline/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-46600	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504234	external
https://www.cve.org/CVERecord?id=CVE-2026-46600	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46600	external
https://go.dev/cl/786345	external
https://go.dev/issue/79795	external
https://pkg.go.dev/vuln/GO-2026-5942	external
https://access.redhat.com/security/cve/CVE-2026-56851	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547607	external
https://www.cve.org/CVERecord?id=CVE-2026-56851	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56851	external
https://go.dev/cl/793360	external
https://go.dev/issue/80112	external
https://pkg.go.dev/vuln/GO-2026-6629	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-78667	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548334	external
https://www.cve.org/CVERecord?id=CVE-2026-78667	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78667	external
https://go.dev/cl/847309	external
https://go.dev/issue/81858	external
https://groups.google.com/g/golang-announce/c/U2f…	external
https://pkg.go.dev/vuln/GO-2026-6609	external
https://access.redhat.com/security/cve/CVE-2026-78669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548344	external
https://www.cve.org/CVERecord?id=CVE-2026-78669	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78669	external
https://go.dev/cl/847186	external
https://go.dev/cl/847308	external
https://go.dev/issue/81742	external
https://groups.google.com/g/golang-announce/c/ZPw…	external
https://pkg.go.dev/vuln/GO-2026-6611	external
https://access.redhat.com/security/cve/CVE-2026-84304	self
https://bugzilla.redhat.com/show_bug.cgi?id=2526955	external
https://www.cve.org/CVERecord?id=CVE-2026-84304	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84304	external
https://github.com/grpc/grpc-go/commit/7354d9c8de…	external
https://github.com/grpc/grpc-go/commit/8cfeca0e1e…	external
https://github.com/grpc/grpc-go/pull/9331	external
https://github.com/grpc/grpc-go/pull/9333	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.1	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-84445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175	external
https://www.cve.org/CVERecord?id=CVE-2026-84445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445	external
https://github.com/grpc/grpc-go/commit/3822494d8e…	external
https://github.com/grpc/grpc-go/commit/8668b69c16…	external
https://github.com/grpc/grpc-go/commit/93e31b4854…	external
https://github.com/grpc/grpc-go/issues/9354	external
https://github.com/grpc/grpc-go/pull/9365	external
https://github.com/grpc/grpc-go/pull/9366	external
https://github.com/grpc/grpc-go/pull/9367	external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-97031	self
https://bugzilla.redhat.com/show_bug.cgi?id=2548336	external
https://www.cve.org/CVERecord?id=CVE-2026-97031	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97031	external
https://go.dev/cl/847312	external
https://go.dev/issue/81855	external
https://pkg.go.dev/vuln/GO-2026-6607	external
https://access.redhat.com/security/cve/CVE-2026-111943	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556068	external
https://access.redhat.com/security/vulnerabilitie…	external
https://www.cve.org/CVERecord?id=CVE-2026-111943	external
https://nvd.nist.gov/vuln/detail/CVE-2026-111943	external
https://github.com/golang/go/issues/82345	external
https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU	external
https://access.redhat.com/security/cve/CVE-2026-114406	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556046	external
https://www.cve.org/CVERecord?id=CVE-2026-114406	external
https://nvd.nist.gov/vuln/detail/CVE-2026-114406	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Builds 1.9.2",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Release of Red Hat OpenShift Builds 1.9.2",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:89131",
        "url": "https://access.redhat.com/errata/RHSA-2026:89131"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-111943",
        "url": "https://access.redhat.com/security/cve/CVE-2026-111943"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-114406",
        "url": "https://access.redhat.com/security/cve/CVE-2026-114406"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40161",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40161"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40938",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40938"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46600",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46600"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56851",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56851"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-78667",
        "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-78669",
        "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84304",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84304"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97031",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89131.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2",
    "tracking": {
      "current_release_date": "2026-10-26T17:58:58+00:00",
      "generator": {
        "date": "2026-10-26T17:58:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:89131",
      "initial_release_date": "2026-10-24T20:43:05+00:00",
      "revision_history": [
        {
          "date": "2026-10-24T20:43:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-24T20:43:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-26T17:58:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Builds 1.9.2",
                "product": {
                  "name": "Red Hat OpenShift Builds 1.9.2",
                  "product_id": "Red Hat OpenShift Builds 1.9.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_builds:1.9::el10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Builds"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3A4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792837598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3Adcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792837398"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3A0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792838765"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3A5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792835879"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3Aa1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792859629"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle\u0026tag=1792863311"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3Aae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792857112"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3Ac5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792840655"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3Ab450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792839475"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3Aa35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792835571"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3A41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792837598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3A749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792837398"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3Abb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792838765"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3Ab1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792835879"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3A35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792859629"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3A96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792857112"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3Ace44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792840655"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3A6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792839475"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3A978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792835571"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3A1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792837598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3A4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792837398"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3Af57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792838765"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3A7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792835879"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3A4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792859629"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3Afc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792857112"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3Afde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792840655"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3A1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792839475"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3Aa31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792835571"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel10@sha256%3Af0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10\u0026tag=1792837598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel10@sha256%3A5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10\u0026tag=1792837398"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel10@sha256%3A07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10\u0026tag=1792838765"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel10@sha256%3A3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10\u0026tag=1792835879"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel10-operator@sha256%3Aa9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator\u0026tag=1792859629"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel10@sha256%3Ac850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10\u0026tag=1792857112"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel10@sha256%3Ae2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10\u0026tag=1792840655"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel10@sha256%3Abe87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10\u0026tag=1792839475"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel10@sha256%3A20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10\u0026tag=1792835571"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64 as a component of Red Hat OpenShift Builds 1.9.2",
          "product_id": "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.9.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-40161",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-04-21T17:02:07.015859+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460173"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoint, the system-configured Git API token (such as a GitHub Personal Access Token or GitLab token) can be sent to the attacker. This information disclosure allows for the exfiltration of sensitive API tokens.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact information disclosure flaw affects Tekton Pipelines. A user with permissions to create TaskRun or PipelineRun resources could exfiltrate the system-configured Git API token by directing the serverURL to an attacker-controlled endpoint and omitting the token parameter. This vulnerability doesn\u0027t affect a couple of Red Hat supported products as it\u0027s using a Pipelines version previously from 1.0.0, where the affected code is not present.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460173",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460173"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40161",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40161",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/issues/9608",
          "url": "https://github.com/tektoncd/pipeline/issues/9608"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/issues/9609",
          "url": "https://github.com/tektoncd/pipeline/issues/9609"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff",
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff"
        }
      ],
      "release_date": "2026-04-21T16:26:27.381000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that the Git API token parameter is always explicitly provided when configuring Tekton Pipelines. Additionally, restrict permissions for creating TaskRun or PipelineRun resources to only trusted users to limit the attack surface. Review and enforce policies that prevent the use of user-controlled serverURLs without proper token authentication. Configuration changes may require a restart or reload of affected services to take effect.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL"
    },
    {
      "cve": "CVE-2026-40938",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-21T21:02:16.557479+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460292"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tekton Pipelines, a system for declaring continuous integration/continuous delivery (CI/CD) pipelines. An authenticated user, able to submit `ResolutionRequest` objects, can exploit a vulnerability by injecting malicious commands into the git resolver\u0027s revision parameter. This allows for the execution of unauthorized programs on the resolver pod. Successful exploitation can lead to the exfiltration of all cluster-wide secrets, resulting in significant information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Tekton Pipelines allows an authenticated user to achieve arbitrary code execution on the resolver pod by injecting malicious commands into the git resolver\u0027s revision parameter. This vulnerability happens because the `revision` parameter is passed as a positional argument to the `git fetch` command without any previous validation whether the parameter\u0027s value doesn\u0027t start with `-` character. Combining this lack of validation with the fact the function which validates the repository URL explicitly allows a repository URL to being with `/`, translating to a local filesystem. An attacker with enough privileges to perform an operation which trigger resolvers to use the `ResolutionRequest` function can \nchain both behaviors to trick Tekton Pipelines to load and execute an arbitrary binary on the resolver pod.\n\nExploring this vulnerability may be considered of a high complexity as an attacker needs to either know an existing valid git repository located at a predicable path already in the resolver pod or a default URL configuration pointing to a local filesystem\u0027s path.\n \nA successful exploitation of the flaw can lead to the exfiltration of all cluster-wide secrets, posing a significant risk to the integrity and confidentiality of the OpenShift environment. Additionally, depending on the data included in the `kubeconfig` files, an attacker may achieve privilege escalation or perform lateral movements within the targeted cluster.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460292",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460292"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40938",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40938",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1",
          "url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq",
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
        }
      ],
      "release_date": "2026-04-21T20:45:24.658000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands"
    },
    {
      "cve": "CVE-2026-46600",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:59.038876+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504234"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504234",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504234"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/786345",
          "url": "https://go.dev/cl/786345"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79795",
          "url": "https://go.dev/issue/79795"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5942",
          "url": "https://pkg.go.dev/vuln/GO-2026-5942"
        }
      ],
      "release_date": "2026-07-21T19:18:59.755000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing"
    },
    {
      "cve": "CVE-2026-56851",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-07T18:01:23.622132+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547607"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service (DoS) by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing the application to panic and crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547607",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547607"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56851"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/793360",
          "url": "https://go.dev/cl/793360"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80112",
          "url": "https://go.dev/issue/80112"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6629",
          "url": "https://pkg.go.dev/vuln/GO-2026-6629"
        }
      ],
      "release_date": "2026-10-07T17:46:35.620000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-78667",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:51.418048+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548334"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity for Red Hat products because an unauthenticated remote attacker can exhaust server compute resources over the network, leading to a complete service outage. Across Red Hat enterprise environments, Go is widely deployed in container runtimes, monitoring daemons, and OpenShift infrastructure components. However, exploitation is restricted to applications that actively listen on the network and serve content using standard library HTTP handlers that process multi-range requests. CLI utilities and server components that do not handle byte-range requests from untrusted clients remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548334",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78667",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847309",
          "url": "https://go.dev/cl/847309"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81858",
          "url": "https://go.dev/issue/81858"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6609",
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "release_date": "2026-10-08T22:53:59.148000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers"
    },
    {
      "cve": "CVE-2026-78669",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:01:28.964317+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go net/http package and the golang.org/x/net/http2 module. A malicious HTTP/2 peer can cause excessive CPU consumption by opening a large number of HTTP/2 streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. Each SETTINGS frame forces the server or client to iterate over all open streams to adjust their flow-control windows, resulting in quadratic CPU usage and denial of service.\n\nThis vulnerability affects all Go programs that serve or consume HTTP/2 traffic using net/http or golang.org/x/net/http2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847186",
          "url": "https://go.dev/cl/847186"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847308",
          "url": "https://go.dev/cl/847308"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81742",
          "url": "https://go.dev/issue/81742"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs",
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6611",
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "release_date": "2026-10-08T22:53:59.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "In case you consume HTTP2, upgrade to a patched version of the http module.\n\nVerify:\n```\ngo version\ngo list -m golang.org/x/net\ngovulncheck ./...\n```",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
    },
    {
      "cve": "CVE-2026-84304",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-01T18:41:15.538515+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2526955"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84304"
        },
        {
          "category": "external",
          "summary": "RHBZ#2526955",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526955"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84304"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176",
          "url": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77",
          "url": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9331",
          "url": "https://github.com/grpc/grpc-go/pull/9331"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9333",
          "url": "https://github.com/grpc/grpc-go/pull/9333"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc"
        }
      ],
      "release_date": "2026-09-01T18:19:10.100000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    },
    {
      "cve": "CVE-2026-97031",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:59.284728+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can trigger memory exhaustion and crash server processes without requiring privileges or user interaction. Go applications that terminate TLS connections and accept Encrypted Client Hello configurations are vulnerable to resource amplification during the initial handshake. While the flaw does not facilitate arbitrary code execution or compromise data confidentiality, the resulting denial of service can disrupt critical network services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847312",
          "url": "https://go.dev/cl/847312"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81855",
          "url": "https://go.dev/issue/81855"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6607",
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "release_date": "2026-10-08T22:53:58.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references"
    },
    {
      "cve": "CVE-2026-111943",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-20T09:38:36.160000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556068"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important because Go applications validating TLS certificates could accept unauthorized certificates issued by distrusted intermediate Certificate Authorities, potentially compromising the integrity and confidentiality of secure network communications. Any Go-based client or server relying on standard certificate verification may be exposed to man-in-the-middle attacks if an attacker intercepts traffic using certificates derived from these intermediate keys. Exploitation requires specific network positioning and certificates generated by the untrusted intermediate authorities, limiting opportunistic widespread abuse.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556068",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556068"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-012",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-111943",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/go/issues/82345",
          "url": "https://github.com/golang/go/issues/82345"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU",
          "url": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU"
        }
      ],
      "release_date": "2026-10-20T02:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates"
    },
    {
      "cve": "CVE-2026-114406",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-20T09:01:55.916000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556046"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-114406"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556046",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556046"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-012",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-114406",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-114406"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-114406",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114406"
        }
      ],
      "release_date": "2026-10-20T13:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-24T20:43:05+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:41e99f5dea364f0de41184e7347775788ff5b55e69a51ec223ca0089adbe3d97_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b0ab2041aa128c74e860ffc2709fcab8fed6389c22fc09b1bc4b2c5aad9392a_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:4019ff7c4c20d745c970c829c1ea0b0cbaab3271e9aeecf8e6a6975eae0250c5_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:5f0e83fa072d2c0b377316d39c040e85589617d2f09045d7ba6143f3b8487236_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:dcd025175a5c13628954c9840f7b9617903e788000426cde8f7d5119854a3d56_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:07017952e47c4580e376a8aa00d7b4f40e4809c444b1c4d11e526929319d1e54_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:f57e7ab46c730ce39e89b650ada238c99f8ca565baca762d500ff90e3f93ea29_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:7dd65709022285786b5e325a6e1483f3a2e2b398cb02d8e86028e24d8fda9865_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:b1f95359097339473ba91792f031783566dd0da7b4e9967dd4f518cef0599913_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:96ac86cc8c505eb755d510b1f433b9c687877dfa8086585fa97ea72f31d3202f_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:ae6c47a18e3430e92bd256c64e6df4ad580d6460b7639298d8ef12238d565552_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:c5fc8308e35852849007fbc46a8edd0d29cea8186f4005c07f8d4b9bded0a768_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:ce44ab3d9710fdd7c57eb0a88f06b0fcf1f5bb002fd845eea9cb5fc9f2f8e809_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:be87094b960451d193d6060ae9b27067e11f4c356c9333b52429fc585bd34c50_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:20db0729dc4020c469ec5b8b8417d8790650a403adfed5abfe1b5ce7b5a5b551_s390x",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:978ccd5ae0a0fab4fdd5d894e100738ec663f13ed369648852421e1db70bdfed_arm64",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a31d0966f95c7870c814f2ea5338fe178f9a09f8096258036e462b4b5bdae872_ppc64le",
            "Red Hat OpenShift Builds 1.9.2:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel10@sha256:a35fa5ec5c67023feddf3416f80f5517f975012f48572beb91d6e1f155c40cd7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns"
    }
  ]
}

CVE-2026-111943 (GCVE-0-2026-111943)

Vulnerability from cvelistv5 – Published: 2026-10-21 00:52 – Updated: 2026-10-21 01:24

Title

Distrust compromised intermediate certificates in crypto/x509

Summary

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

Severity

No CVSS data available.

CWE

CWE-299 - Improper Check for Certificate Revocation

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

5 references

URL	Tags
https://go.dev/cl/851047
https://go.dev/issue/82345
https://groups.google.com/g/golang-announce/c/66p…
https://pkg.go.dev/vuln/GO-2026-6809
http://www.openwall.com/lists/oss-security/2026/1…

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.26.10 (semver) Affected: 1.27.0-0 , < 1.27.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-10-21T01:24:20.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/20/29"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-299: Improper Check for Certificate Revocation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T00:52:18.359Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/851047"
        },
        {
          "url": "https://go.dev/issue/82345"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/66pojueaQek"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6809"
        }
      ],
      "title": "Distrust compromised intermediate certificates in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-111943",
    "datePublished": "2026-10-21T00:52:18.359Z",
    "dateReserved": "2026-10-17T13:43:28.599Z",
    "dateUpdated": "2026-10-21T01:24:20.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-114406 (GCVE-0-2026-114406)

Vulnerability from cvelistv5 – Published: 2026-10-21 20:56 – Updated: 2026-10-26 11:03

Title

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Summary

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

CWE-295 - Improper Certificate Validation

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1047 records in the last 180 days details

References

17 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:86595	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88455	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88459	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88550	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88560	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88563	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88564	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88662	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88668	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88669	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:88779	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:89081	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:89131	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-114406	vdb-entryx_refsource_REDHAT
https://access.redhat.com/security/vulnerabilitie…	technical-descriptionx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2556046	issue-trackingx_refsource_REDHAT

Impacted products

36 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:2026.2.92_v9.0.319-100.3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:2026.2.92_v9.0.319-100.3.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:2026.2.92_v9.0.319-70.3.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:2026.2.92_v9.0.319-81.3.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_4 , < * (rpm) cpe:/o:redhat:rhel_aus:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_8 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:2026.2.92_v9.0.319-80.3.el8_8 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_8 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_2 , < * (rpm) cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_4 , < * (rpm) cpe:/o:redhat:rhel_e4s:9.4::baseos
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2026.2.92_v9.0.319-90.3.el9_6 , < * (rpm) cpe:/o:redhat:rhel_eus:9.6::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 2026.2.92_v9.0.319-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792840135 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792835365 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792835298 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792836805 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792844269 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792837466 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792838794 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792837567 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.3	Unaffected: 1792851895 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792837598 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792837398 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792838765 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792835879 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792859629 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792857112 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792840655 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792839475 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat OpenShift Builds 1.9.2	Unaffected: 1792835571 , < * (rpm) cpe:/a:redhat:openshift_builds:1.9::el10
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1

Date Public

2026-10-20 13:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-100.3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-100.3.el10_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-70.3.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-81.3.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-80.3.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2026.2.92_v9.0.319-90.3.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2026.2.92_v9.0.319-1.hum1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-controller-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792840135",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835365",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835298",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792836805",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-rhel9-operator",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792844269",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837466",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-webhook-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792838794",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837567",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-webhook-rhel9",
          "product": "Red Hat OpenShift Builds 1.8.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792851895",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-controller-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837598",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-git-cloner-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792837398",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-bundler-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792838765",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-image-processing-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835879",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-rhel10-operator",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792859629",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792857112",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-shared-resource-webhook-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792840655",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-waiters-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792839475",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.9::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-builds/openshift-builds-webhook-rhel10",
          "product": "Red Hat OpenShift Builds 1.9.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1792835571",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "ca-certificates",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argocd-agent-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argocd-image-updater-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argocd-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/argo-rollouts-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/dex-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/gitops-promoter-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/gitops-rhel9",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-gitops-1/gitops-rhel9-operator",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-10-20T13:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Critical"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T11:03:04.170Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:86595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:86595"
        },
        {
          "name": "RHSA-2026:88455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88455"
        },
        {
          "name": "RHSA-2026:88459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88459"
        },
        {
          "name": "RHSA-2026:88550",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88550"
        },
        {
          "name": "RHSA-2026:88560",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88560"
        },
        {
          "name": "RHSA-2026:88562",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88562"
        },
        {
          "name": "RHSA-2026:88563",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88563"
        },
        {
          "name": "RHSA-2026:88564",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88564"
        },
        {
          "name": "RHSA-2026:88662",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88662"
        },
        {
          "name": "RHSA-2026:88668",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88668"
        },
        {
          "name": "RHSA-2026:88669",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88669"
        },
        {
          "name": "RHSA-2026:88779",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:88779"
        },
        {
          "name": "RHSA-2026:89081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:89081"
        },
        {
          "name": "RHSA-2026:89131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:89131"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-114406"
        },
        {
          "name": "RHSB-2026-012",
          "tags": [
            "technical-description",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
        },
        {
          "name": "RHBZ#2556046",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556046"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-20T09:01:55.916Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-10-20T13:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns",
      "workarounds": [
        {
          "lang": "en",
          "value": "See the security bulletin for a detailed mitigation procedure."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-295: Improper Certificate Validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-114406",
    "datePublished": "2026-10-21T20:56:26.866Z",
    "dateReserved": "2026-10-21T11:57:07.758Z",
    "dateUpdated": "2026-10-26T11:03:04.170Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33818 (GCVE-0-2026-33818)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-10-26 16:22

Title

Enforce maximum recursion depth in encoding/asn1

Summary

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:11 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/80405
https://groups.google.com/g/golang-announce/c/94p…
https://go.dev/cl/814980
https://pkg.go.dev/vuln/GO-2026-5972

Impacted products

1 product

Vendor	Product	Version
Go standard library	encoding/asn1	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Marwan Atia (marwansamir688@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33818",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:11:19.904646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:12:34.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "encoding/asn1",
          "product": "encoding/asn1",
          "programRoutines": [
            {
              "name": "parseSequenceOf"
            },
            {
              "name": "parseField"
            },
            {
              "name": "UnmarshalWithParams"
            },
            {
              "name": "Unmarshal"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marwan Atia (marwansamir688@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T16:22:56.157Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80405"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://go.dev/cl/814980"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "title": "Enforce maximum recursion depth in encoding/asn1"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33818",
    "datePublished": "2026-08-13T21:58:52.821Z",
    "dateReserved": "2026-03-23T20:35:32.815Z",
    "dateUpdated": "2026-10-26T16:22:56.157Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39821 (GCVE-0-2026-39821)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-09-17 12:04

Title

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Summary

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-23 03:55 UTC

CWE

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

159 references

URL	Tags
https://go.dev/cl/767220
https://go.dev/issue/78760
https://groups.google.com/g/golang-announce/c/iI-…
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-5026
https://access.redhat.com/security/cve/CVE-2026-39821	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66350	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54580	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57845	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65851	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67517	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56143	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63134	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37436	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35827	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65534	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35830	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35831	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41930	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68504	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61245	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60354	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67159	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60315	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51112	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56223	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57541	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35828	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35829	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65886	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65153	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39879	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34364	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56340	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47952	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50843	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42132	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33524	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35994	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54284	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54285	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54274	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54283	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44624	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51341	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42048	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36105	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36167	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

317 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
Go standard library	net/http/internal/http2	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
golang.org/x/net	golang.org/x/net/idna	Affected: 0 , < 0.55.0 (semver)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.6-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.1-5.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:5.3.0-7.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-27.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.5-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-6.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:165.1-5.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:5.3.0-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:2.21.0-2.el10_0.3 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-10.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.6.1-2.el10_0.7 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:10.2.6-26.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:0.11-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.4.1-11.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.2.10-31.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:5.1.1-16.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260710105056.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-2.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.7.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-23.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.1.1-17.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.5-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-8.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:76.1-7.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2.15.0-2.el9_2.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.1.1-5.el9_2.2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:3.2.0-2.el9_2.10 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:2.17.0-2.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:101.3-4.el9_4.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:5.1.1-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:10.2.6-22.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2.21.0-7.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.152.1-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:5.1.1-15.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:132.2-10.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:3.6.1-2.el9_6.7 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202609011112-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.20::el8
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 0:4.21.0-202609021357.p2.g83d4961.assembly.stream.el10 , < * (rpm) cpe:/a:redhat:openshift:4.21::el8
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.22::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:3.3.23-22.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.4-1.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840519 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839981 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839193 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838753 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840539 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782844225 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839658 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838476 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	DevWorkspace Operator 0.42	Unaffected: 1782401674 , < * (rpm) cpe:/a:redhat:devworkspace:0.42::el9
Red Hat	Logging for Red Hat OpenShift 6	Unaffected: 1785418851 , < * (rpm) cpe:/a:redhat:logging:6.0::el9
Red Hat	Logging for Red Hat OpenShift 6.2	Unaffected: 1784747813 , < * (rpm) cpe:/a:redhat:logging:6.2::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.4	Unaffected: 1782408807 , < * (rpm) cpe:/a:redhat:logging:6.4::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.5	Unaffected: 1786645107 , < * (rpm) cpe:/a:redhat:logging:6.5::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783332008 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783333268 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783985999 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782477094 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782308518 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784737366 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784306906 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783260894 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784061472 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784152046 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784768332 , < * (rpm) Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785180878 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.6	Unaffected: 1784058822 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.6::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787685239 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383730 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156698 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157632 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157829 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157630 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782382580 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383255 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782488873 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157507 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782396604 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782382711 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157546 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157471 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157018 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156920 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782374537 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383676 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156860 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782465412 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784652040 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784638644 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784740143 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1781686446 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1781686458 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.11	Unaffected: 1783352589 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.11::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1783962464 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783917963 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502438 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194574 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127736 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782804957 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758407 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758410 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782754093 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782744816 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758409 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782744830 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1786483782 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783953372 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785171639 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.2	Unaffected: 1784211378 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.2::el9
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1784127491 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783544461 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1784004914 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783946386 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788312157 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787330073 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787051722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787102977 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630755 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630724 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630124 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611780 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612055 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787153683 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787088234 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612219 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787090180 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787089049 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787361677 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057515 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932114 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782931768 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932104 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536000 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783535989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536515 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932521 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018461 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018421 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932812 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537001 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932919 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932969 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933015 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933042 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537392 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933251 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537955 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933417 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537742 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933602 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783019377 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934054 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934036 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782991491 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775772 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775770 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775834 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784777166 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775793 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775768 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775782 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift GitOps 1.19	Unaffected: 1782292352 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.19::el8
Red Hat	Red Hat OpenShift GitOps 1.20	Unaffected: 1782383826 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.20::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.12	Unaffected: 1785202723 , < * (rpm) cpe:/a:redhat:workload_availability_nhc:0.12::el9
Red Hat	Red Hat OpenShift Workload Availability 0.13	Unaffected: 1785203036 , < * (rpm) cpe:/a:redhat:workload_availability_snr:0.13::el9
Red Hat	Red Hat OpenShift Workload Availability 0.3	Unaffected: 1785203474 , < * (rpm) cpe:/a:redhat:workload_availability_sbr:0.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.7	Unaffected: 1785203508 , < * (rpm) cpe:/a:redhat:workload_availability_mdr:0.7::el9
Red Hat	Red Hat OpenShift Workload Availability 0.8	Unaffected: 1785203079 , < * (rpm) cpe:/a:redhat:workload_availability_far:0.8::el9
Red Hat	Red Hat OpenShift Workload Availability 5.7	Unaffected: 1785202847 , < * (rpm) cpe:/a:redhat:workload_availability_nmo:5.7::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1786181981 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.18	Unaffected: 1785923308 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785929994 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Red Hat Web Terminal 1.16	Unaffected: 1784295767 , < * (rpm) cpe:/a:redhat:webterminal:1.16::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Compliance Operator	cpe:/a:redhat:openshift_compliance_operator:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4 cpe:/a:redhat:lvms:5
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift API for Data Protection	cpe:/a:redhat:openshift_api_data_protection:1
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Certification Program for Red Hat Enterprise Linux 9	cpe:/a:redhat:certifications:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 1	cpe:/a:redhat:service_interconnect:1
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

KC1zs4 (https://github.com/KC1zs4) Longwei Wang (https://github.com/gn00295120)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39821",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-23T03:55:58.522682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:13:15.606Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-5.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-7.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-27.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-6.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-2.el10_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-5.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-2.el10_0.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-10.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el10_0.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-26.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.11-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.1-11.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-31.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-16.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260710105056.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-9.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-2.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-23.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-17.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-8.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:76.1-7.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.15.0-2.el9_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-5.el9_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.2.0-2.el9_2.10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.17.0-2.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-7.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-15.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-10.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el9_6.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202609011112-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-crio-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.21.0-202609021357.p2.g83d4961.assembly.stream.el10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.23-22.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782844225",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:devworkspace:0.42::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "DevWorkspace Operator 0.42",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782401674",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785418851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784747813",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782408807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786645107",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332008",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783333268",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783985999",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782477094",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782308518",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784306906",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783260894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785180878",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787685239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156698",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157632",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157829",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/cluster-backup-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383255",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782488873",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-state-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157507",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/metrics-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782396604",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-observability-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382711",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/node-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157546",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157471",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157018",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-alertmanager-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156920",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782374537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/rbac-query-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-receive-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156860",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782465412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784652040",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multiclusterhub-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784638644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784740143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686446",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686458",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783352589",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783962464",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783917963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127736",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782804957",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758407",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758410",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782754093",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744816",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758409",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744830",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-controller-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783953372",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785171639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784211378",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784004914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783946386",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788312157",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787330073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feast-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787051722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787102977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630755",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630724",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630124",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612055",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787153683",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787088234",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612219",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-spark-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787090180",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787361677",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782991491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-opa-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775770",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-jaeger-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775834",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-operator-bundle",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784777166",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775793",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782292352",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps 1.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383826",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_snr:0.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/self-node-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203474",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203079",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-maintenance-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 5.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786181981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785923308",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785929994",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784295767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/far-operator-0-8",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4",
              "cpe:/a:redhat:lvms:5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/mdr-operator-0-7",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-proxy-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/image-based-install-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/nhc-operator-0-12",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/logic-rhel9-operator",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-cli-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-must-gather-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-indexer-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-api-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/cert-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-client-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/memcached-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/search-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/submariner-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-5-dashboard-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-6-dashboard-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "unknown",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/toolbox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-fips1.25",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-codeflare-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "atomic-openshift-service-idler",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/ovn-rhel9-operator",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-rhel8-operator",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T15:01:21.462Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T12:04:30.881Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
          },
          {
            "name": "RHBZ#2480756",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42080"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66350"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54580"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57845"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65851"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67517"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56143"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63134"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30855"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37436"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35827"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65534"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66432"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35830"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35831"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41930"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68504"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61245"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60354"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67159"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59562"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60315"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51112"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56223"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57541"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30854"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35828"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35829"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65886"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65153"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39879"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36808"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34364"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56340"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47952"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50843"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42132"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33524"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35994"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35993"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54284"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54285"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54274"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54283"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44624"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51341"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42048"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42852"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36105"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36167"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66350: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65851: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67149: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67517: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63134: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66432: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66016: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68504: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67319: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67160: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65359: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61245: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67159: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54395: Red Hat Quay 3.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51341: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51194: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T16:00:52.844Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T15:01:21.462Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
        "workarounds": [
          {
            "lang": "en",
            "value": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "idnaASCII"
            },
            {
              "name": "Client.CloseIdleConnections"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "Get"
            },
            {
              "name": "Head"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "http1ClientConn.Close"
            },
            {
              "name": "http1ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.RoundTrip"
            },
            {
              "name": "http2RoundTripper.RoundTrip"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http/internal/http2",
          "product": "net/http/internal/http2",
          "programRoutines": [
            {
              "name": "authorityAddr"
            },
            {
              "name": "Transport.AddConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/idna",
          "product": "golang.org/x/net/idna",
          "programRoutines": [
            {
              "name": "Profile.process"
            },
            {
              "name": "Profile.ToASCII"
            },
            {
              "name": "Profile.ToUnicode"
            },
            {
              "name": "ToASCII"
            },
            {
              "name": "ToUnicode"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "KC1zs4 (https://github.com/KC1zs4)"
        },
        {
          "lang": "en",
          "value": "Longwei Wang (https://github.com/gn00295120)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-21T21:01:48.612Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/767220"
        },
        {
          "url": "https://go.dev/issue/78760"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39821",
    "datePublished": "2026-05-22T15:01:21.462Z",
    "dateReserved": "2026-04-07T18:13:03.526Z",
    "dateUpdated": "2026-09-17T12:04:30.881Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40161 (GCVE-0-2026-40161)

Vulnerability from cvelistv5 – Published: 2026-04-21 16:26 – Updated: 2026-05-21 21:20

Title

Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

Summary

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the Tekton Pipelines git resolver in API mode sends the system-configured Git API token to a user-controlled serverURL when the user omits the token parameter. A tenant with TaskRun or PipelineRun create permission can exfiltrate the shared API token (GitHub PAT, GitLab token, etc.) by pointing serverURL to an attacker-controlled endpoint. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue.

Severity

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-21 17:41 UTC

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7766 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/tektoncd/pipeline/security/adv…	x_refsource_CONFIRM
https://github.com/tektoncd/pipeline/issues/9608	x_refsource_MISC
https://github.com/tektoncd/pipeline/issues/9609	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
tektoncd	pipeline	Affected: >= 1.0.0, < 1.0.2 Affected: >= 1.2.0, < 1.3.4 Affected: >= 1.4.0, < 1.6.2 Affected: >= 1.7.0, < 1.9.3 Affected: >= 1.10.0, < 1.11.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40161",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-21T17:41:32.164689Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-21T17:41:38.895Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pipeline",
          "vendor": "tektoncd",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.0.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.0, \u003c 1.3.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.0, \u003c 1.6.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.7.0, \u003c 1.9.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.10.0, \u003c 1.11.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the Tekton Pipelines git resolver in API mode sends the system-configured Git API token to a user-controlled serverURL when the user omits the token parameter. A tenant with TaskRun or PipelineRun create permission can exfiltrate the shared API token (GitHub PAT, GitLab token, etc.) by pointing serverURL to an attacker-controlled endpoint. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-201",
              "description": "CWE-201: Insertion of Sensitive Information Into Sent Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-21T21:20:13.227Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff"
        },
        {
          "name": "https://github.com/tektoncd/pipeline/issues/9608",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tektoncd/pipeline/issues/9608"
        },
        {
          "name": "https://github.com/tektoncd/pipeline/issues/9609",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tektoncd/pipeline/issues/9609"
        }
      ],
      "source": {
        "advisory": "GHSA-wjxp-xrpv-xpff",
        "discovery": "UNKNOWN"
      },
      "title": "Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-40161",
    "datePublished": "2026-04-21T16:26:27.381Z",
    "dateReserved": "2026-04-09T19:31:56.014Z",
    "dateUpdated": "2026-05-21T21:20:13.227Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40938 (GCVE-0-2026-40938)

Vulnerability from cvelistv5 – Published: 2026-04-21 20:45 – Updated: 2026-09-07 12:04

Title

Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

Summary

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the git resolver's revision parameter is passed directly as a positional argument to git fetch without any validation that it does not begin with a - character. Because git parses flags from mixed positional arguments, an attacker can inject arbitrary git fetch flags such as --upload-pack=<binary>. Combined with the validateRepoURL function explicitly permitting URLs that begin with / (local filesystem paths), a tenant who can submit ResolutionRequest objects can chain these two behaviors to execute an arbitrary binary on the resolver pod. The tekton-pipelines-resolvers ServiceAccount holds cluster-wide get/list/watch on all Secrets, so code execution on the resolver pod enables full cluster-wide secret exfiltration. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-22 18:31 UTC

CWE

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7766 records in the last 180 days details

References

10 references

URL	Tags
https://github.com/tektoncd/pipeline/security/adv…	x_refsource_CONFIRM
https://github.com/tektoncd/pipeline/releases/tag…	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-40938	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2460292	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26538	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26519	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24484	vendor-advisoryx_refsource_REDHAT

Impacted products

23 products

Vendor	Product	Version
tektoncd	pipeline	Affected: >= 1.0.0, < 1.0.2 Affected: >= 1.2.0, < 1.3.4 Affected: >= 1.4.0, < 1.6.2 Affected: >= 1.7.0, < 1.9.3 Affected: >= 1.10.0, < 1.11.1
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1780373846 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1780374151 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1780373867 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1780373835 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1780480839 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1780374228 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1780374084 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1778683229 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1778683134 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1778683436 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1778682932 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1778682930 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1778682920 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Pipelines 1.21	Unaffected: cli-1.21.1 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.21::el9
Red Hat	Red Hat OpenShift Pipelines 1.21	Unaffected: 1780645012 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.21::el9
Red Hat	Red Hat OpenShift Pipelines 1.21	Unaffected: 1781686494 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.21::el9
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40938",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T18:31:54.871943Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T18:36:16.790Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780373846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780374151",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780373867",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780373835",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780480839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780374228",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-webhook-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780374084",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778683229",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778683134",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778683436",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778682932",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778682930",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-webhook-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778682920",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "serve-tkn-cli-1-21-serve-tkn",
            "product": "Red Hat OpenShift Pipelines 1.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "cli-1.21.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-rhel9-operator",
            "product": "Red Hat OpenShift Pipelines 1.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780645012",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-operator-bundle",
            "product": "Red Hat OpenShift Pipelines 1.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686494",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/openshift-mcp-server-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-chains-controller-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-chains-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-cli-tkn-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-cli-tkn-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-controller-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-entrypoint-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-entrypoint-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-events-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-events-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-git-init-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-git-init-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-hub-api-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-api-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-nop-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-nop-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-opc-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-operator-proxy-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-operator-proxy-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-operator-webhook-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-operator-webhook-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-cli-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-pruner-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-resolvers-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-resolvers-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-results-api-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-results-api-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-results-watcher-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-results-watcher-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-rhel8-operator",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-sidecarlogresults-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-sidecarlogresults-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-triggers-controller-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-triggers-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-triggers-core-interceptors-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-triggers-core-interceptors-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-triggers-webhook-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-triggers-webhook-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-webhook-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-webhook-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-pipelines/pipelines-workingdirinit-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-workingdirinit-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/kn-client-kn-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/kn-plugin-func-func-util-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-ssp-operator-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-template-validator-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhtas/ec-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-21T20:45:24.658Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Tekton Pipelines, a system for declaring continuous integration/continuous delivery (CI/CD) pipelines. An authenticated user, able to submit `ResolutionRequest` objects, can exploit a vulnerability by injecting malicious commands into the git resolver\u0027s revision parameter. This allows for the execution of unauthorized programs on the resolver pod. Successful exploitation can lead to the exfiltration of all cluster-wide secrets, resulting in significant information disclosure."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-88",
                "description": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-07T12:04:45.955Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-40938"
          },
          {
            "name": "RHBZ#2460292",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460292"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40938.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26538"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26519"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24484"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24359: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17546: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26538: Red Hat OpenShift Pipelines 1.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26519: Red Hat OpenShift Pipelines 1.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24484: Red Hat OpenShift Pipelines 1.21"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-21T21:02:16.557Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-21T20:45:24.658Z",
            "value": "Made public."
          }
        ],
        "title": "github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pipeline",
          "vendor": "tektoncd",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.0.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.0, \u003c 1.3.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.0, \u003c 1.6.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.7.0, \u003c 1.9.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.10.0, \u003c 1.11.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the git resolver\u0027s revision parameter is passed directly as a positional argument to git fetch without any validation that it does not begin with a - character. Because git parses flags from mixed positional arguments, an attacker can inject arbitrary git fetch flags such as --upload-pack=\u003cbinary\u003e. Combined with the validateRepoURL function explicitly permitting URLs that begin with / (local filesystem paths), a tenant who can submit ResolutionRequest objects can chain these two behaviors to execute an arbitrary binary on the resolver pod. The tekton-pipelines-resolvers ServiceAccount holds cluster-wide get/list/watch on all Secrets, so code execution on the resolver pod enables full cluster-wide secret exfiltration. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-21T22:40:09.754Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
        },
        {
          "name": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1"
        }
      ],
      "source": {
        "advisory": "GHSA-94jr-7pqp-xhcq",
        "discovery": "UNKNOWN"
      },
      "title": "Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-40938",
    "datePublished": "2026-04-21T20:45:24.658Z",
    "dateReserved": "2026-04-15T20:40:15.518Z",
    "dateUpdated": "2026-09-07T12:04:45.955Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46600 (GCVE-0-2026-46600)

Vulnerability from cvelistv5 – Published: 2026-07-21 19:18 – Updated: 2026-08-14 15:46

Title

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Summary

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 15:00 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/cl/786345
https://go.dev/issue/79795
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-5942

Impacted products

2 products

Vendor	Product	Version
Go standard library	net	Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
golang.org/x/net	golang.org/x/net/dns/dnsmessage	Affected: 0 , < 0.56.0 (semver)

Credits

Mundur (https://github.com/M0nd0R)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-46600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T15:00:27.171241Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T15:00:35.473Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net",
          "product": "net",
          "programRoutines": [
            {
              "name": "cgoResSearch"
            },
            {
              "name": "LookupCNAME"
            },
            {
              "name": "Resolver.LookupCNAME"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/dns/dnsmessage",
          "product": "golang.org/x/net/dns/dnsmessage",
          "programRoutines": [
            {
              "name": "unpackSVCBResource"
            },
            {
              "name": "Message.Unpack"
            },
            {
              "name": "Parser.Additional"
            },
            {
              "name": "Parser.AllAdditionals"
            },
            {
              "name": "Parser.AllAnswers"
            },
            {
              "name": "Parser.AllAuthorities"
            },
            {
              "name": "Parser.Answer"
            },
            {
              "name": "Parser.Authority"
            },
            {
              "name": "Parser.HTTPSResource"
            },
            {
              "name": "Parser.SVCBResource"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.56.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mundur (https://github.com/M0nd0R)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T15:46:12.894Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/786345"
        },
        {
          "url": "https://go.dev/issue/79795"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5942"
        }
      ],
      "title": "Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-46600",
    "datePublished": "2026-07-21T19:18:59.755Z",
    "dateReserved": "2026-05-15T17:35:00.814Z",
    "dateUpdated": "2026-08-14T15:46:12.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56851 (GCVE-0-2026-56851)

Vulnerability from cvelistv5 – Published: 2026-10-07 17:46 – Updated: 2026-10-08 13:49

Title

Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

Summary

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-08 13:48 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

3 references

URL	Tags
https://go.dev/cl/793360
https://go.dev/issue/80112
https://pkg.go.dev/vuln/GO-2026-6629

Impacted products

1 product

Vendor	Product	Version
golang.org/x/text	golang.org/x/text/secure/precis	Affected: 0 , < 0.41.0 (semver)

Credits

Omkhar Arasaratnam (GitHub: omkhar)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56851",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-08T13:48:57.351617Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-08T13:49:06.348Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/text/secure/precis",
          "product": "golang.org/x/text/secure/precis",
          "programRoutines": [
            {
              "name": "nickAdditionalMapping.Transform"
            },
            {
              "name": "Profile.Append"
            },
            {
              "name": "Profile.AppendCompareKey"
            },
            {
              "name": "Profile.Bytes"
            },
            {
              "name": "Profile.Compare"
            },
            {
              "name": "Profile.CompareKey"
            },
            {
              "name": "Profile.NewTransformer"
            },
            {
              "name": "Profile.String"
            },
            {
              "name": "Transformer.Bytes"
            },
            {
              "name": "Transformer.String"
            },
            {
              "name": "Transformer.Transform"
            }
          ],
          "vendor": "golang.org/x/text",
          "versions": [
            {
              "lessThan": "0.41.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Omkhar Arasaratnam (GitHub: omkhar)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-07T17:46:35.620Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/793360"
        },
        {
          "url": "https://go.dev/issue/80112"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6629"
        }
      ],
      "title": "Panic parsing crafted input in x/text/secure/precis in golang.org/x/text"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56851",
    "datePublished": "2026-10-07T17:46:35.620Z",
    "dateReserved": "2026-06-23T15:10:49.352Z",
    "dateUpdated": "2026-10-08T13:49:06.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56853 (GCVE-0-2026-56853)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:23

Title

Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http

Summary

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:22 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/80205
https://go.dev/cl/795540
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6089

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56853",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:22:45.475320Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:23:18.680Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "conn.readRequest"
            },
            {
              "name": "conn.serve"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.092Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80205"
        },
        {
          "url": "https://go.dev/cl/795540"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "title": "Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56853",
    "datePublished": "2026-08-13T21:58:53.092Z",
    "dateReserved": "2026-06-23T15:10:49.352Z",
    "dateUpdated": "2026-08-14T15:23:18.680Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56858 (GCVE-0-2026-56858)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:32

Title

Fix Javascript regexp context tracking in html/template

Summary

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:31 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 74 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/80435
https://go.dev/cl/807100
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6091

Impacted products

1 product

Vendor	Product	Version
Go standard library	html/template	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Ali Sherif

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:31:30.140536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:32:29.852Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "html/template",
          "product": "html/template",
          "programRoutines": [
            {
              "name": "tJS"
            },
            {
              "name": "Template.Execute"
            },
            {
              "name": "Template.ExecuteTemplate"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ali Sherif"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, pathological inputs could close an unescaped \u0027/\u0027 early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.354Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80435"
        },
        {
          "url": "https://go.dev/cl/807100"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "title": "Fix Javascript regexp context tracking in html/template"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56858",
    "datePublished": "2026-08-13T21:58:53.354Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T15:32:29.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:89131

CVE-2026-111943 (GCVE-0-2026-111943)

CVE-2026-114406 (GCVE-0-2026-114406)

CVE-2026-33818 (GCVE-0-2026-33818)

CVE-2026-39821 (GCVE-0-2026-39821)

CVE-2026-40161 (GCVE-0-2026-40161)

CVE-2026-40938 (GCVE-0-2026-40938)

CVE-2026-46600 (GCVE-0-2026-46600)

CVE-2026-56851 (GCVE-0-2026-56851)

CVE-2026-56853 (GCVE-0-2026-56853)

CVE-2026-56858 (GCVE-0-2026-56858)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour