RHSA-2026:99021

Vulnerability from csaf_redhat - Published: 2026-11-11 15:41 - Updated: 2026-11-13 20:55
Summary
Red Hat Security Advisory: Red Hat Quay - 3.9.28
Severity
Critical
Notes
Topic: Red Hat Quay v3.9.28
Details: Red Hat Quay is a container image registry for building, distributing, and deploying containers. This advisory contains the container images for Red Hat Quay 3.9.28. See the following Release Notes documentation for additional details about this release: https://docs.redhat.com/en/documentation/red_hat_quay/3.9/html/red_hat_quay_release_notes/index
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-90711

A flaw was found in proxy-addr. When an application defines trusted proxy subnets using IPv4-mapped IPv6 addresses with an improper prefix length, the subnet parser fails open and erroneously treats all incoming network addresses as trusted. A remote, unauthenticated attacker can exploit this vulnerability by submitting a forged X-Forwarded-For header to spoof their client IP address. This flaw allows attackers to bypass IP-based access controls, rate limiting, and audit logging.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-290 - Authentication Bypass by Spoofing
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64 —
Workaround
Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x —
Workaround
Threats
Impact Important
CVE-2026-97687

A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy's TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-97689

A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102267

A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102268

A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Critical
CVE-2026-102272

A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102273

A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102994

A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102996

A flaw was found in pypdf. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a specially crafted PDF document with an oversized font character width array. When processing the document during operations such as text extraction, the library allocates excessive memory, leading to resource exhaustion and potential application failure.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102997

A flaw was found in pypdf. A remote attacker can exploit this vulnerability by providing a crafted PDF document containing a partially malformed FlateDecode data compression stream. When processing the malformed stream, the application triggers an inefficient recovery routine that consumes excessive processing time, potentially resulting in application unresponsiveness and a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102998

A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-102999

A flaw was found in pypdf. An attacker can cause a Denial of Service (DoS) by supplying a specially crafted PDF document containing a large number of embedded files. When an application accesses the attachment mapping, the library repeatedly reparses the entire attachment list for each lookup. This repetitive processing consumes excessive computational resources, leading to severe performance degradation and unresponsiveness.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-103000

A flaw was found in pypdf. By supplying a specially crafted PDF file containing unusually large alphabetical page-label values, a remote attacker can trigger excessive memory allocation when an application retrieves document page labels. This uncontrolled memory consumption can cause the application to crash or become unresponsive, resulting in a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-110697

A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations.

9.9 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-89 - Improper Neutralization of Special Elements used in an SQL Command
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Critical
CVE-2026-112390

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying a specially crafted Microsoft Image Composer (MIC) file. When an application attempts to count or extract frames from the malicious image, an improper state reset triggers an infinite loop. This non-advancing loop consumes excessive CPU resources and can hang application worker processes indefinitely.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-118669

A flaw was found in oauthlib. In certain token grant flows, the authorization system can authenticate an incoming client while retaining a different, client-supplied identifier for permission and scope validation. A remote, authenticated attacker with lower privileges can exploit this inconsistency by submitting another client's identifier during token requests. This flaw leads to privilege escalation, potentially allowing the attacker to obtain access tokens with unauthorized permissions and scopes associated with another client.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-807 - Reliance on Untrusted Inputs in a Security Decision
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Important
CVE-2026-123710

A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for any repository, allowing read and write access to private images and replacement of repository tags.

9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Fixed 3 products, the same list as for CVE-2026-90711
Known not affected 21 products, the same list as for CVE-2026-90711
Threats
Impact Critical
References
URL Category
https://access.redhat.com/errata/RHSA-2026:99021 self
https://access.redhat.com/security/cve/CVE-2026-102267 external
https://access.redhat.com/security/cve/CVE-2026-102268 external
https://access.redhat.com/security/cve/CVE-2026-102272 external
https://access.redhat.com/security/cve/CVE-2026-102273 external
https://access.redhat.com/security/cve/CVE-2026-102994 external
https://access.redhat.com/security/cve/CVE-2026-102996 external
https://access.redhat.com/security/cve/CVE-2026-102997 external
https://access.redhat.com/security/cve/CVE-2026-102998 external
https://access.redhat.com/security/cve/CVE-2026-102999 external
https://access.redhat.com/security/cve/CVE-2026-103000 external
https://access.redhat.com/security/cve/CVE-2026-110697 external
https://access.redhat.com/security/cve/CVE-2026-112390 external
https://access.redhat.com/security/cve/CVE-2026-118669 external
https://access.redhat.com/security/cve/CVE-2026-123710 external
https://access.redhat.com/security/cve/CVE-2026-97687 external
https://access.redhat.com/security/cve/CVE-2026-97689 external
https://access.redhat.com/security/cve/CVE-2026-90711 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-90711 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533602 external
https://www.cve.org/CVERecord?id=CVE-2026-90711 external
https://nvd.nist.gov/vuln/detail/CVE-2026-90711 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/jshttp/proxy-addr/security/adv… external
https://access.redhat.com/security/cve/CVE-2026-97687 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543255 external
https://www.cve.org/CVERecord?id=CVE-2026-97687 external
https://nvd.nist.gov/vuln/detail/CVE-2026-97687 external
https://github.com/urllib3/urllib3/commit/07408ce… external
https://github.com/urllib3/urllib3/commit/b644729… external
https://github.com/urllib3/urllib3/pull/5093 external
https://github.com/urllib3/urllib3/releases/tag/2.8.0 external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-97689 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543245 external
https://www.cve.org/CVERecord?id=CVE-2026-97689 external
https://nvd.nist.gov/vuln/detail/CVE-2026-97689 external
https://github.com/urllib3/urllib3/commit/cd770b0… external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-102267 self
https://bugzilla.redhat.com/show_bug.cgi?id=2542690 external
https://www.cve.org/CVERecord?id=CVE-2026-102267 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102267 external
https://github.com/jpadilla/pyjwt/commit/0a795b8e… external
https://github.com/jpadilla/pyjwt/releases/tag/2.14.0 external
https://github.com/jpadilla/pyjwt/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-102268 self
https://bugzilla.redhat.com/show_bug.cgi?id=2542685 external
https://www.cve.org/CVERecord?id=CVE-2026-102268 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102268 external
https://github.com/jpadilla/pyjwt/commit/8b4e233a… external
https://github.com/jpadilla/pyjwt/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-102272 self
https://bugzilla.redhat.com/show_bug.cgi?id=2542695 external
https://www.cve.org/CVERecord?id=CVE-2026-102272 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102272 external
https://github.com/jpadilla/pyjwt/commit/18078393… external
https://github.com/jpadilla/pyjwt/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-102273 self
https://bugzilla.redhat.com/show_bug.cgi?id=2542697 external
https://www.cve.org/CVERecord?id=CVE-2026-102273 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102273 external
https://github.com/jpadilla/pyjwt/commit/801cd128… external
https://github.com/jpadilla/pyjwt/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-102994 self
https://bugzilla.redhat.com/show_bug.cgi?id=2544270 external
https://www.cve.org/CVERecord?id=CVE-2026-102994 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102994 external
https://github.com/py-pdf/pypdf/commit/82501d2993… external
https://github.com/py-pdf/pypdf/pull/4055 external
https://github.com/py-pdf/pypdf/releases/tag/6.18.0 external
https://github.com/py-pdf/pypdf/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-102996 self
https://bugzilla.redhat.com/show_bug.cgi?id=2544277 external
https://www.cve.org/CVERecord?id=CVE-2026-102996 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102996 external
https://github.com/py-pdf/pypdf/commit/0fb26eb8cd… external
https://github.com/py-pdf/pypdf/pull/4072 external
https://github.com/py-pdf/pypdf/releases/tag/6.18.1 external
https://github.com/py-pdf/pypdf/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-102997 self
https://bugzilla.redhat.com/show_bug.cgi?id=2544294 external
https://www.cve.org/CVERecord?id=CVE-2026-102997 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102997 external
https://github.com/py-pdf/pypdf/commit/d9d38cf99b… external
https://github.com/py-pdf/pypdf/pull/4073 external
https://github.com/py-pdf/pypdf/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-102998 self
https://bugzilla.redhat.com/show_bug.cgi?id=2544283 external
https://www.cve.org/CVERecord?id=CVE-2026-102998 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102998 external
https://github.com/py-pdf/pypdf/commit/959467a9b9… external
https://github.com/py-pdf/pypdf/pull/4087 external
https://github.com/py-pdf/pypdf/releases/tag/6.19.0 external
https://github.com/py-pdf/pypdf/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-102999 self
https://bugzilla.redhat.com/show_bug.cgi?id=2544307 external
https://www.cve.org/CVERecord?id=CVE-2026-102999 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102999 external
https://github.com/py-pdf/pypdf/commit/6b10556d13… external
https://github.com/py-pdf/pypdf/pull/4081 external
https://github.com/py-pdf/pypdf/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-103000 self
https://bugzilla.redhat.com/show_bug.cgi?id=2544308 external
https://www.cve.org/CVERecord?id=CVE-2026-103000 external
https://nvd.nist.gov/vuln/detail/CVE-2026-103000 external
https://github.com/py-pdf/pypdf/commit/0d8b5a8832… external
https://github.com/py-pdf/pypdf/pull/4096 external
https://github.com/py-pdf/pypdf/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-110697 self
https://bugzilla.redhat.com/show_bug.cgi?id=2552237 external
https://www.cve.org/CVERecord?id=CVE-2026-110697 external
https://nvd.nist.gov/vuln/detail/CVE-2026-110697 external
https://access.redhat.com/solutions/7149592 external
https://access.redhat.com/security/cve/CVE-2026-112390 self
https://bugzilla.redhat.com/show_bug.cgi?id=2555848 external
https://www.cve.org/CVERecord?id=CVE-2026-112390 external
https://nvd.nist.gov/vuln/detail/CVE-2026-112390 external
https://github.com/python-pillow/Pillow/commit/26… external
https://github.com/python-pillow/Pillow/releases/… external
https://github.com/python-pillow/Pillow/security/… external
https://access.redhat.com/security/cve/CVE-2026-118669 self
https://bugzilla.redhat.com/show_bug.cgi?id=2563201 external
https://www.cve.org/CVERecord?id=CVE-2026-118669 external
https://nvd.nist.gov/vuln/detail/CVE-2026-118669 external
https://github.com/oauthlib/oauthlib/commit/c951a… external
https://github.com/oauthlib/oauthlib/pull/920 external
https://github.com/oauthlib/oauthlib/releases/tag… external
https://github.com/oauthlib/oauthlib/security/adv… external
https://access.redhat.com/security/cve/CVE-2026-123710 self
https://bugzilla.redhat.com/show_bug.cgi?id=2568072 external
https://www.cve.org/CVERecord?id=CVE-2026-123710 external
https://nvd.nist.gov/vuln/detail/CVE-2026-123710 external
https://access.redhat.com/solutions/7149923 external
Acknowledgments
Red Hat Dave O'Connor
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay v3.9.28",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Quay is a container image registry for building, distributing, and deploying containers.\n\nThis advisory contains the container images for Red Hat Quay 3.9.28. See the following Release Notes documentation for additional details about this release:\n\nhttps://docs.redhat.com/en/documentation/red_hat_quay/3.9/html/red_hat_quay_release_notes/index",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:99021",
        "url": "https://access.redhat.com/errata/RHSA-2026:99021"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102267",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102267"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102268",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102268"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102272",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102272"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102273",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102273"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102994",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102994"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102996",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102996"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102997",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102997"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102998",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102998"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-102999",
        "url": "https://access.redhat.com/security/cve/CVE-2026-102999"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-103000",
        "url": "https://access.redhat.com/security/cve/CVE-2026-103000"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-110697",
        "url": "https://access.redhat.com/security/cve/CVE-2026-110697"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-112390",
        "url": "https://access.redhat.com/security/cve/CVE-2026-112390"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-118669",
        "url": "https://access.redhat.com/security/cve/CVE-2026-118669"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-123710",
        "url": "https://access.redhat.com/security/cve/CVE-2026-123710"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97687",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97687"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97689",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97689"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-90711",
        "url": "https://access.redhat.com/security/cve/CVE-2026-90711"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99021.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay - 3.9.28",
    "tracking": {
      "current_release_date": "2026-11-13T20:55:06+00:00",
      "generator": {
        "date": "2026-11-13T20:55:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.6"
        }
      },
      "id": "RHSA-2026:99021",
      "initial_release_date": "2026-11-11T15:41:12+00:00",
      "revision_history": [
        {
          "date": "2026-11-11T15:41:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-12T18:12:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-13T20:55:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.9",
                "product": {
                  "name": "Red Hat Quay 3.9",
                  "product_id": "Red Hat Quay 3.9",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.9::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1793112934"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1793129245"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1793112945"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1793129247"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Ac5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1793137236"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1793113450"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1793112952"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1793807219"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3Acbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1794005291"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1793993730"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1793112934"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1793112945"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Ad1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1793137236"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1793113450"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3Aa64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1793112952"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1793807219"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1793993730"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1793112934"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1793112945"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Ad52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1793137236"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ab4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1793113450"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3Ab628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1793112952"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3Ae9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1793807219"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1793993730"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-90711",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "discovery_date": "2026-09-15T06:41:11.029083+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533602"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in proxy-addr. When an application defines trusted proxy subnets using IPv4-mapped IPv6 addresses with an improper prefix length, the subnet parser fails open and erroneously treats all incoming network addresses as trusted. A remote, unauthenticated attacker can exploit this vulnerability by submitting a forged X-Forwarded-For header to spoof their client IP address. This flaw allows attackers to bypass IP-based access controls, rate limiting, and audit logging.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because unauthenticated remote attackers can spoof client IP addresses and circumvent security controls, such as rate limits or network access lists, by sending custom forwarding headers. Exploitation is contingent on application configurations that define reverse proxy trust subnets using IPv4-mapped IPv6 notation with short IPv4 prefix lengths. Environments configuring trusted proxies via canonical IPv4 CIDR blocks, hostnames, or default loopback addresses are not vulnerable to this behavior.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-90711"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533602",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533602"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-90711",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-90711"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-90711",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90711"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h",
          "url": "https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h"
        }
      ],
      "release_date": "2026-09-15T06:19:46.332000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw through configuration:\n\n1. Configure trusted proxy definitions using standard IPv4 notation (such as `10.0.0.0/8`) rather than IPv4-mapped IPv6 notation.\n2. If IPv4-mapped IPv6 notation is required, set the subnet prefix length to at least 97 to cover the mapped boundary (for example, specify `::ffff:10.0.0.0/104` instead of `::ffff:10.0.0.0/8`).\n3. Alternatively, sanitize or strip incoming `X-Forwarded-For` headers at edge load balancers or boundary reverse proxies before passing traffic to backend applications.\n\nWarning: Modifying application configuration files requires restarting the Node.js application service, which will temporarily interrupt service availability and active connections.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet"
    },
    {
      "cve": "CVE-2026-97687",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-09-29T15:44:25.449046+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543255"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy\u0027s TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has evaluated this vulnerability as having an Important impact because a network attacker can exploit corrupted TLS validation states to impersonate an HTTPS proxy, enabling complete interception and manipulation of sensitive communications as well as client credential theft. Successful exploitation depends on specialized application architectures where outgoing requests utilize an HTTPS-capable proxy alongside customized destination TLS parameters that inadvertently override proxy verification. Default Red Hat enterprise deployments that communicate directly with endpoints, utilize traditional HTTP proxies, or rely on standard CONNECT tunneling for end-to-end encryption do not expose this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97687"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543255",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543255"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97687",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465",
          "url": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3",
          "url": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/pull/5093",
          "url": "https://github.com/urllib3/urllib3/pull/5093"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
          "url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77"
        }
      ],
      "release_date": "2026-09-29T15:30:27.136000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override"
    },
    {
      "cve": "CVE-2026-97689",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-29T15:41:38.807723+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543245"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important impact because an untrusted remote server can trigger process crashes and complete denial of service across client applications without requiring authentication or special privileges. In Red Hat environments, urllib3 is integrated across numerous system tools, container workloads, and platform services to handle outbound web communication. The risk specifically manifests when these services process streamed replies from potentially malicious third-party endpoints, whereas workloads restricted to internal or verified infrastructure remain largely unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97689"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543245",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543245"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97689",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97689"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed",
          "url": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
          "url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"
        }
      ],
      "release_date": "2026-09-29T15:36:05.963000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser"
    },
    {
      "cve": "CVE-2026-102267",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-09-28T20:42:16.576688+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542690"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important impact because improper handling of HTTP redirects during dynamic key retrieval can allow an adversary to supply forged cryptographic keys or intercept sensitive request headers. In Red Hat environments where services utilize PyJWKClient to fetch JSON Web Key Sets over the network, accepting untrusted key material may compromise token validation and authentication boundaries. Exploitation requires the target service to dynamically resolve keys via HTTP and relies on an attacker\u0027s ability to manipulate responses returned by the configured key server.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102267"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542690",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542690"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102267",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102267"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",
          "url": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj"
        }
      ],
      "release_date": "2026-09-28T20:23:33.556000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects"
    },
    {
      "cve": "CVE-2026-102268",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-09-28T20:40:56.952621+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542685"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: PyJWT: Authentication bypass via improper public key validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker could forge valid cryptographic tokens and bypass authentication checks without knowing the private signing key. Exploitation occurs when consuming applications configure token verification to accept both symmetric and asymmetric algorithms simultaneously, allowing an asymmetric public key to be mishandled as a symmetric secret. Deployments that strictly enforce a single algorithm type or validate tokens using JSON Web Key sets do not permit this algorithm confusion and remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102268"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542685",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542685"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102268",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102268"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
          "url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
        }
      ],
      "release_date": "2026-09-28T20:26:13.674000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "pyjwt: PyJWT: Authentication bypass via improper public key validation"
    },
    {
      "cve": "CVE-2026-102272",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-09-28T20:51:42.409127+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity because successful exploitation permits an unauthenticated remote attacker to bypass authentication and forge valid tokens, though exploitation requires specific mixed-algorithm verification settings. In Red Hat environments, exposure is restricted to services that simultaneously allow both symmetric HMAC and asymmetric signature algorithms while parsing public keys that contain byte order marks. Workloads and services that enforce single-algorithm verification policies or utilize standard asymmetric key validation routines are not susceptible to this attack.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102272"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102272",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102272"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291",
          "url": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"
        }
      ],
      "release_date": "2026-09-28T20:36:31.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling"
    },
    {
      "cve": "CVE-2026-102273",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-09-28T20:52:12.127939+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542697"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102273"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542697",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542697"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
          "url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
          "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
        }
      ],
      "release_date": "2026-09-28T20:38:28.161000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
    },
    {
      "cve": "CVE-2026-102994",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-09-30T20:11:27.869277+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544270"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can make a Red Hat service unavailable when pypdf parses a crafted PDF with excessively long indirect-object tokens.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102994"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544270",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544270"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102994",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102994"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e",
          "url": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4055",
          "url": "https://github.com/py-pdf/pypdf/pull/4055"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246"
        }
      ],
      "release_date": "2026-09-30T19:57:37.810000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files"
    },
    {
      "cve": "CVE-2026-102996",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-30T20:31:40.417244+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544277"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a specially crafted PDF document with an oversized font character width array. When processing the document during operations such as text extraction, the library allocates excessive memory, leading to resource exhaustion and potential application failure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via excessive memory consumption during font parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can exhaust memory when a Red Hat service extracts text from a crafted PDF with an oversized font width array.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102996"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544277",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544277"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102996",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102996"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102996",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102996"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5",
          "url": "https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4072",
          "url": "https://github.com/py-pdf/pypdf/pull/4072"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q"
        }
      ],
      "release_date": "2026-09-30T20:03:55.880000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via excessive memory consumption during font parsing"
    },
    {
      "cve": "CVE-2026-102997",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition"
      },
      "discovery_date": "2026-09-30T20:33:19.560934+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544294"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. A remote attacker can exploit this vulnerability by providing a crafted PDF document containing a partially malformed FlateDecode data compression stream. When processing the malformed stream, the application triggers an inefficient recovery routine that consumes excessive processing time, potentially resulting in application unresponsiveness and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted FlateDecode stream",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can consume excessive processing time when a Red Hat service decodes a malformed FlateDecode stream in a crafted PDF.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102997"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544294",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544294"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102997",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102997"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102997",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102997"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79",
          "url": "https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4073",
          "url": "https://github.com/py-pdf/pypdf/pull/4073"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3"
        }
      ],
      "release_date": "2026-09-30T20:05:51.538000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted FlateDecode stream"
    },
    {
      "cve": "CVE-2026-102998",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-09-30T20:32:15.895525+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544283"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted PDF form fields",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can exhaust resources when a Red Hat product uses pypdf to flatten form fields in a crafted PDF; ordinary PDF reading does not trigger it.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102998"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544283",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544283"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102998",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102998"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7",
          "url": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4087",
          "url": "https://github.com/py-pdf/pypdf/pull/4087"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj"
        }
      ],
      "release_date": "2026-09-30T20:09:13.634000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted PDF form fields"
    },
    {
      "cve": "CVE-2026-102999",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-09-30T20:34:15.273555+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544307"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. An attacker can cause a Denial of Service (DoS) by supplying a specially crafted PDF document containing a large number of embedded files. When an application accesses the attachment mapping, the library repeatedly reparses the entire attachment list for each lookup. This repetitive processing consumes excessive computational resources, leading to severe performance degradation and unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via crafted PDF with numerous embedded files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can consume excessive processing time when a Red Hat product accesses pypdf\u2019s attachment mapping for a crafted PDF with many embedded files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544307",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544307"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102999"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3",
          "url": "https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4081",
          "url": "https://github.com/py-pdf/pypdf/pull/4081"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj"
        }
      ],
      "release_date": "2026-09-30T20:10:38.433000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via crafted PDF with numerous embedded files"
    },
    {
      "cve": "CVE-2026-103000",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-30T20:34:19.510872+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544308"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pypdf. By supplying a specially crafted PDF file containing unusually large alphabetical page-label values, a remote attacker can trigger excessive memory allocation when an application retrieves document page labels. This uncontrolled memory consumption can cause the application to crash or become unresponsive, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypdf: pypdf: Denial of Service via large alphabetical page labels",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact flaw can exhaust memory when a Red Hat product retrieves page labels from a crafted PDF containing unusually large alphabetical label values.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-103000"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544308",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544308"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-103000",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-103000"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-103000",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103000"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a",
          "url": "https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/pull/4096",
          "url": "https://github.com/py-pdf/pypdf/pull/4096"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
          "url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c",
          "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c"
        }
      ],
      "release_date": "2026-09-30T20:13:00.379000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypdf: pypdf: Denial of Service via large alphabetical page labels"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dave O\u0027Connor"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-110697",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command"
      },
      "discovery_date": "2026-10-14T14:00:48.387000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2552237"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants\u0027 namespaces, leading to cross-tenant credential theft and unauthorized image operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: quay: SQL LIKE wildcard injection in robot listing leaks cross-tenant robot tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated Critical because it lets an authenticated attacker break tenant isolation in multi-tenant Quay deployments. By creating a namespace whose name contains an underscore that collides with an existing one, the attacker causes the underscore to act as a single-character SQL LIKE wildcard, matching the victim\u0027s namespace. This allows the attacker to list and steal the victim\u0027s robot account tokens, then use them to read, push, or overwrite that tenant\u0027s container images. No elevated privileges or victim interaction are required. In OpenShift environments where Quay serves as the integrated container registry, stolen robot credentials can be used to inject malicious images into CI/CD pipelines, putting the container supply chain across production clusters at risk. Multi-tenant Quay deployments are common in enterprises sharing a registry across teams and in service providers hosting multiple customer organizations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-110697"
        },
        {
          "category": "external",
          "summary": "RHBZ#2552237",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552237"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-110697",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-110697"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110697",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110697"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/solutions/7149592",
          "url": "https://access.redhat.com/solutions/7149592"
        }
      ],
      "release_date": "2026-11-11T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Update to the fixed Red Hat Quay release for your version: 3.9.28, 3.10.28, 3.12.24, 3.14.10, 3.15.9, 3.16.7, 3.17.7, or 3.18.3. Red Hat has already fixed Quay.io. There is no other complete workaround.\nIf you cannot update immediately, restrict who can create organizations or namespaces containing an underscore, rotate robot tokens for any namespace that collides with an underscore-containing one, and monitor registry activity for pulls or pushes that don\u0027t match expected robot usage. These steps reduce exposure but do not fix the underlying flaw.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "quay: quay: SQL LIKE wildcard injection in robot listing leaks cross-tenant robot tokens"
    },
    {
      "cve": "CVE-2026-112390",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition"
      },
      "discovery_date": "2026-10-19T20:51:58.037704+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2555848"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying a specially crafted Microsoft Image Composer (MIC) file. When an application attempts to count or extract frames from the malicious image, an improper state reset triggers an infinite loop. This non-advancing loop consumes excessive CPU resources and can hang application worker processes indefinitely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can induce an infinite loop, exhausting worker CPU resources and resulting in a denial of service for applications handling untrusted image data. Within Red Hat environments, Pillow is deployed across numerous container images, machine learning frameworks, and automated backend services. Exploitation requires the optional olefile dependency to be present to register the Microsoft Image Composer format handler, and specifically targets workflows that query frame counts or process multi-frame images. Environments that do not inspect frame counts or do not have olefile installed are not vulnerable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-112390"
        },
        {
          "category": "external",
          "summary": "RHBZ#2555848",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555848"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-112390",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-112390"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-112390",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112390"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218",
          "url": "https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/13.0.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/13.0.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9"
        }
      ],
      "release_date": "2026-10-19T20:35:39.189000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent Pillow from enumerating or extracting frames from untrusted Microsoft Image Composer (MIC) files when olefile is installed: upgrade to Pillow 13.0.0 (or the fixed Python Pillow/Python3.11 Pillow/Rhoai/Odh Openvino Model Server Rhel/Rhelai3/Bootc Cuda Rhel/Rhelai3/Bootc Gaudi Rhel/Rhelai3/Bootc Rocm Rhel/Rhelai3/Disk Image Cuda Rhel/Python3X Pillow/Rhaiis/Vllm Spyre Rhel/Rhoai/Odh Kserve Storage Initializer Rhel/Rhoai/Odh Kserve Agent Rhel/Rhoai/Odh Kserve Controller Rhel/Rhoai/Odh Kserve Router Rhel/Rhoai/Odh Feature Server Rhel/Rhoai/Odh Trustyai Nemo Guardrails Server Rhel/Rhaiis/Vllm Tpu Rhel/Rhoai/Odh Training Cuda128 Torch29 Py312 Rhel/Rhoai/Odh Training Rocm64 Torch29 Py312 Rhel/Rhaiis/Vllm Cpu Rhel/Rhaiis/Vllm Neuron Rhel/Ansible Automation Platform 25/Lightspeed Chatbot Rhel/Openshift Lightspeed/Lightspeed Ocp Rag Rhel/Rhoai/Odh Th06 Cpu Torch291 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch291 Py312 Rhel/Rhoai/Odh Vllm Gaudi Rhel/Python3.12 Pillow/Rhaii/Vllm Gaudi Rhel/Rhaii/Vllm Neuron Rhel/Rhaii/Vllm Tpu Rhel/Lightspeed Core/Lightspeed Stack Rhel/Rhoai/Odh Kserve Autogluon Server Rhel/Rhai Early Access/Docling Sdk Cuda Rhel/Rhai Early Access/Docling Serve Cuda Rhel/Rhoai/Odh Llm D Kv Cache Rhel/Rhoai/Odh Th06 Cpu Torch210 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch210 Py312 Rhel/Rhoai/Odh Th06 Rocm64 Torch291 Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Llmcompressor Cuda Py312 Rhel/Ask Sre/Rhel Cla/Rlsapi Rhel/Rhaiis/Model Opt Cuda Rhel/Rhaiis/Vllm Cuda Rhel/Rhaiis/Vllm Rocm Rhel/Rhaii/Model Opt Cuda Rhel/Rhaii/Vllm Cpu Rhel/Rhaii/Vllm Cuda Rhel/Rhaii/Vllm Rocm Rhel/Rhaii/Vllm Spyre Rhel/Ansible Automation Platform/Automation Dashboard Rhel/Ansible Automation Platform 26/Hub Rhel/Ansible Automation Platform 26/Lightspeed Chatbot Rhel/Ansible Automation Platform 27/Hub Rhel/Ansible Automation Platform 27/Lightspeed Chatbot Rhel/Galaxy Ng/Automation Hub Container/Aap Rag Content/Ansible Chatbot Stack/Koku Report Emailer/Exploit Intelligence/Vulnerability Analysis Rhel/Insights Host Inventory/Google Lightspeed Agent/Lscore Deploy/Lightspeed Core/Rag Tool Cpu Rhel/Lightspeed Core/Rag Tool Cuda 12.9 Rhel/Lightspeed Services Ocp/Ocp Rules Rhel/Openshift Lightspeed Tech Preview/Lightspeed Rag Tool Rhel/Openshift Lightspeed/Lightspeed Service Api Rhel/Rhoai/Odh Caikit Tgis Serving Rhel/Rhoai/Odh Llama Stack Core Rhel/Rhoai/Odh Pipeline Runtime Pytorch Llmcompressor Cuda Py312 Rhel/Rhoai/Odh Automl Rhel/Rhoai/Odh Autorag Rhel/Rhoai/Odh Mlflow Rhel/Rhoai/Odh Pipeline Runtime Datascience Cpu Py312 Rhel/Rhoai/Odh Pipeline Runtime Pytorch Cuda Py312 Rhel/Rhoai/Odh Pipeline Runtime Pytorch Rocm Py312 Rhel/Rhoai/Odh Pipeline Runtime Tensorflow Cuda Py312 Rhel/Rhoai/Odh Pipeline Runtime Tensorflow Rocm Py312 Rhel/Rhoai/Odh Trustyai Garak Lls Provider Dsp Rhel/Rhoai/Odh Workbench Codeserver Datascience Cpu Py312 Rhel/Rhoai/Odh Workbench Jupyter Datascience Cpu Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Cuda Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Rocm Py312 Rhel/Rhoai/Odh Workbench Jupyter Tensorflow Cuda Py312 Rhel/Rhoai/Odh Workbench Jupyter Tensorflow Rocm Py312 Rhel/Rhoai/Odh Workbench Jupyter Trustyai Cpu Py312 Rhel/Rhai/Guidellm Rhel/Rhoai/Odh Ogx Core Rhel/Rhoai/Odh Th Torch Cpu Py312 Rhel/Rhoai/Odh Th Torch Cuda Py312 Rhel/Rhoai/Odh Th Torch Rocm Py312 Rhel/Quay/Quay Service Tool/Quay/Quay Rhel/Rhelai3/Bootc Aws Cuda Rhel/Rhelai3/Bootc Azure Cuda Rhel/Rhelai3/Bootc Azure Rocm Rhel/Rhelai3/Bootc Gcp Cuda Rhel builds), which initialize _n_frames in __init__ instead of resetting it in _open(), and avoid re-setting _n_frames and is_animated in _seek() if already set, closing crafted Microsoft Image Composer (MIC) file with an embedded TIFF containing three or more IFDs. Until patched, this is a concern on Applications running Pillow 7.2.0 through 12.3.0 with olefile installed that query n_frames or extract frames from untrusted input, so Reject or sanitize untrusted MIC file uploads at ingestion and avoid calling n_frames or save_all on unverified images in environments where olefile is loaded. As a compensating measure, Impose CPU time limits using ulimit or prlimit to terminate worker processes caught in the non-advancing MIC image parsing loop before system CPU is exhausted and Configure service watchdogs with automatic restart under systemd to detect stalled processes via keep-alives and restore availability. These controls limit blast radius and contain exploitation, but they do not fix the underlying non-advancing frame traversal defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-114 Process Resource Limits (ulimit/prlimit) (medium)",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing"
    },
    {
      "cve": "CVE-2026-118669",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-10-28T21:22:24.906349+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2563201"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oauthlib. In certain token grant flows, the authorization system can authenticate an incoming client while retaining a different, client-supplied identifier for permission and scope validation. A remote, authenticated attacker with lower privileges can exploit this inconsistency by submitting another client\u0027s identifier during token requests. This flaw leads to privilege escalation, potentially allowing the attacker to obtain access tokens with unauthorized permissions and scopes associated with another client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity for Red Hat products because an authenticated client with low privileges can obtain access tokens under a different identity over the network, leading to significant privilege escalation without requiring user interaction. The exposure specifically impacts deployments where the server application relies on the submitted client identifier parameter during scope or grant checks instead of the authenticated client object. Workloads that do not act as an OAuth2 token endpoint or that enforce scope authorization solely from the authenticated entity remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-118669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2563201",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563201"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-118669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-118669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-118669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118669"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d",
          "url": "https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/pull/920",
          "url": "https://github.com/oauthlib/oauthlib/pull/920"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0",
          "url": "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c",
          "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c"
        }
      ],
      "release_date": "2026-10-28T21:09:58.893000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dave O\u0027Connor"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-123710",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-11-06T09:44:27.114000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2568072"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for any repository, allowing read and write access to private images and replacement of repository tags.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: Red Hat Quay: unauthenticated registry signing-key takeover via service key rotation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Critical flaw in Red Hat Quay\u0027s service key server allows an unauthenticated attacker to take over registry token signing. Key rotation authenticates the caller only by verifying that the JWT is signed by an already approved service key with the expected audience and issuer, without checking that the token is a rotation credential. An anonymous token minted by /v2/auth satisfies that check. Installed keys inherit approval and can be created without an expiry, so forged registry tokens are accepted for any repository. Deployments where /keys is reachable by untrusted clients are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-123710"
        },
        {
          "category": "external",
          "summary": "RHBZ#2568072",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2568072"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-123710",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-123710"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-123710",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123710"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/solutions/7149923",
          "url": "https://access.redhat.com/solutions/7149923"
        }
      ],
      "release_date": "2026-11-11T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T15:41:12+00:00",
          "details": "Before you apply this update, make sure all previously released errata that are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99021"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the /keys endpoint at the proxy or load balancer so only trusted internal components can reach it. Review audit logs for service_key_rotate and service_key_delete events with a null expiration_date, and remove any unrecognised approved service keys. Deleting a rogue key is not durable until a fixed build is deployed, because the anonymous request can install a new key.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:4ab3c100a54ed66de04932a4505f7ac4f99f493603fd78bae8af03cd48f97470_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:a64e7123a643e3add9965c26eb7e3deb7ab777e25b57bcb651eb1e6a45b2ee50_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:b628410ff7acdfb096390ad09a171095272c3deb832abd96733b2b5e37eea596_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4058ed171c624346b7f21f469dfa5f6491cc37258b4bbc2b0267422d05a637a3_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:248e7bb4a94702dd2da6205b31e896f108cbe532ee7f85d6e342482500baaf8e_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:28359066a7c70a6bf45d1827cfbb25273f422aebcdd4b3025610edc54c1c7032_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4798a52b0c8a9dd3ade13507c0895f33a841f9f3e8dece828e916a7adf4d44d2_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:2f52f52844ab283701f48394227be0dc07fb2a9b2b04f202f4e30c7a157b936a_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5c661b3e729a070a033130c9f23f1b8c0203a66db62185a253f9c3abd1df6646_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b4f30c27a9cdeb7d0613ff7eaa1349ed35ef467aaeae2129338c704a24c8f7ba_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:c5e8f699be488a78d8d7a13fa4191088e9101625c7f9e63ef292d3593277b99c_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1db97686abfba6d1b5bc73b31469ad6ee0ba808d12414cc602c7ec8d6598aa5_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:d52eb2489d292912fb24c9a1b7a2bc7d3443736adf2b52306b75f74a734a9a01_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:8e067fae59c0e286dda61d04ad88d36bee8affd971454aacb2889ca1b2f59e19_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:4c16019eb2bc74662653a9f7e03d5dcf3286d24474d6f8818f45360df6788118_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:70f4062dbee3ca926fd82784f3f6fda652d0527a7a265f01a457813d30a65a32_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8a371f88c5c424fb904496266b6f45425eca33c09a25a42d8392a90697a0ed6c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:cbacda9357173fc9bf6916332af8e924a95c349c50ee7c6460fd8d9e4502f055_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:0f92529ef44b684db50ea64800e4af22be74ae6c2a9fc7a40a51cd4867251456_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:32f9c4aed02e115440409dc0970f5774892811eaf32871fe0d67550d51dffc76_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:e9527f2819b2117ba939d4a8a799d350cb91411da39e67350b696f9be3b64173_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:096857356a38a4836679bfd9299018f3d5e505e38de4fc76cac87a910f9aae7b_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:206d150328df6573b58988d6e56a01808c4100d838eba008a2e4aa7af40c4b0c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:45e8108881425ded6cb6c4601dd7faaa76105706301b8c908a02955e4bd416df_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "quay: Red Hat Quay: unauthenticated registry signing-key takeover via service key rotation"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.