RHSA-2026:90323

Vulnerability from csaf_redhat - Published: 2026-10-26 14:35 - Updated: 2026-11-08 10:56
Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.9 security update
Severity
Important
Notes
Topic: Important: Red Hat OpenShift GitOps v1.20.9 security update
Details: An update is now available for Red Hat OpenShift GitOps.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.

CWE-59 - Improper Link Resolution Before File Access
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64 —
Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64 —
Workaround
Threats
Impact Important

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Important: Red Hat OpenShift GitOps v1.20.9 security update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for Red Hat OpenShift GitOps.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:90323",
        "url": "https://access.redhat.com/errata/RHSA-2026:90323"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71556",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90323.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.9 security update",
    "tracking": {
      "current_release_date": "2026-11-08T10:56:45+00:00",
      "generator": {
        "date": "2026-11-08T10:56:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHSA-2026:90323",
      "initial_release_date": "2026-10-26T14:35:29+00:00",
      "revision_history": [
        {
          "date": "2026-10-26T14:35:29+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-04T14:13:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-08T10:56:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift GitOps 1.20",
                "product": {
                  "name": "Red Hat OpenShift GitOps 1.20",
                  "product_id": "Red Hat OpenShift GitOps 1.20",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_gitops:1.20::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift GitOps"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Aa9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792361907"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792361985"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792361728"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Adea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792361679"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792361757"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792361904"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792361729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3A072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792361748"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792361743"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-operator-bundle@sha256%3A56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1792363840"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3Af279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792361629"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Ac48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792361907"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792361985"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3Aef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792361728"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Acc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792361679"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3Af51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792361757"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3Afd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792361904"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792361729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3Aad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792361748"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792361743"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3Ab5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792361629"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Aa344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792361907"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792361985"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792361728"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Aeaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792361679"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792361757"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792361904"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3Af21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792361729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3A8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792361748"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792361743"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3A5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792361629"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792361907"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Afc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792361985"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3Aa5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792361728"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792361679"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792361757"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3Afaff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792361904"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792361729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3Ae1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792361748"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792361743"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3A992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792361629"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-71556",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access"
      },
      "discovery_date": "2026-08-07T16:51:14.251077+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512562"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "go-git is a pure-Go implementation of Git. During worktree operations (checkout, status, add), go-git resolves symbolic links without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause a consuming application to read from or write to files outside the intended working directory when that repository is cloned and its worktree operations are used. Exploitation requires the application to clone an attacker-controlled repository and then perform worktree operations against it; applications that only process trusted repositories are not exposed. Red Hat rates the impact of this flaw as Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512562",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71556",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab",
          "url": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac",
          "url": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v5.19.2",
          "url": "https://github.com/go-git/go-git/releases/tag/v5.19.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5",
          "url": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm",
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm"
        }
      ],
      "release_date": "2026-08-07T16:37:40.058000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-26T14:35:29+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:90323"
        },
        {
          "category": "workaround",
          "details": "To reduce the risk of exploitation, do not clone or run worktree operations (checkout, status, add) on Git repositories originating from untrusted or attacker-controllable sources using an affected version of go-git. The issue is resolved by updating to go-git 5.19.2 or 6.0.0-alpha.5 (or later).",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Events included in the timeline

Loading timeline…


    Loading…

    Loading…

    Loading…

    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.